diff options
| author | Aldo Cortesi <aldo@nullcube.com> | 2011-03-18 09:04:49 +1300 |
|---|---|---|
| committer | Aldo Cortesi <aldo@nullcube.com> | 2011-03-18 09:04:49 +1300 |
| commit | e983253ecc85aaa8a51ae562dc1805132d339781 (patch) | |
| tree | 5f360ca325d643f4496373ca929bc9b40a520a25 /libmproxy | |
| parent | 2af6dcf6f7c64f2a14a26c11975d103ba5d39326 (diff) | |
| download | mitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.tar.gz mitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.tar.bz2 mitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.zip | |
Docs, minor cert tweaks.
Diffstat (limited to 'libmproxy')
| -rw-r--r-- | libmproxy/resources/ca.cnf | 8 | ||||
| -rw-r--r-- | libmproxy/utils.py | 1 |
2 files changed, 6 insertions, 3 deletions
diff --git a/libmproxy/resources/ca.cnf b/libmproxy/resources/ca.cnf index e46bb08f..c65c66c8 100644 --- a/libmproxy/resources/ca.cnf +++ b/libmproxy/resources/ca.cnf @@ -5,24 +5,27 @@ x509_extensions = v3_ca req_extensions = v3_ca_req [ req_distinguished_name ] -organizationName = mitmproxy -commonName = Dummy CA +organizationName = mitmproxy +commonName = mitmproxy [ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer basicConstraints = critical,CA:true keyUsage = cRLSign, keyCertSign +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = sslCA [ v3_ca_req ] basicConstraints = critical,CA:true keyUsage = cRLSign, keyCertSign +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = sslCA [ v3_cert ] basicConstraints = CA:false keyUsage = nonRepudiation, digitalSignature, keyEncipherment +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = server subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer @@ -30,4 +33,5 @@ authorityKeyIdentifier=keyid:always,issuer [ v3_cert_req ] basicConstraints = CA:false keyUsage = nonRepudiation, digitalSignature, keyEncipherment +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = server diff --git a/libmproxy/utils.py b/libmproxy/utils.py index 34c49e14..f4df813f 100644 --- a/libmproxy/utils.py +++ b/libmproxy/utils.py @@ -411,7 +411,6 @@ def dummy_cert(certdir, ca, commonname): "-days", "9999", "-out", certpath, "-CA", ca, - "-CAcreateserial", "-extfile", confpath, "-extensions", "v3_cert", ] |