dropped -selfsign option; revoke certificates that are re-generated but not expired...

[stack/cam.git] / lib / newca.py

diff --git a/lib/newca.py b/lib/newca.py
index f036552..7519b31 100644 (file)
--- a/lib/newca.py
+++ b/lib/newca.py
@@ -47,7 +47,7 @@ def newca():
        openssl('ca', 
                '-config', conf_file, '-batch',
                '-keyfile', ca_key_file,
-               '-extensions', 'v3_ca', '-selfsign',
+               '-extensions', 'v3_ca', 
                '-out', ca_file,
                '-infiles', ca_csr_file)
        openssl('ca',