v.licheni.net / stack / cam.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | inline | side by side
allow specifying nsCertType in config
[stack/cam.git] / cam / templates / ext_config
diff --git a/cam/templates/ext_config b/cam/templates/ext_config
index 26aee0c..486c087 100644 (file)
--- a/cam/templates/ext_config
+++ b/cam/templates/ext_config
@@ -1,8 +1,7 @@
 basicConstraints        = CA:false
 basicConstraints        = CA:false
-nsCertType              = client, server
+nsCertType              = %(usage)s
 keyUsage                = nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage        = clientAuth, serverAuth
 keyUsage                = nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage        = clientAuth, serverAuth
-nsComment               = "%(cn)s"
 subjectKeyIdentifier    = hash
 authorityKeyIdentifier  = keyid, issuer:always
 subjectAltName          = @subject_alt_name
 subjectKeyIdentifier    = hash
 authorityKeyIdentifier  = keyid, issuer:always
 subjectAltName          = @subject_alt_name