x509v3_config.pod (256281) | x509v3_config.pod (267258) |
---|---|
1=pod 2 3=for comment openssl_manual_section:5 4 5=head1 NAME 6 7x509v3_config - X509 V3 certificate extension configuration format 8 --- 287 unchanged lines hidden (view full) --- 296 indirectCRL=TRUE 297 onlysomereasons=keyCompromise, CACompromise 298 299 [issuer_sect] 300 C=UK 301 O=Organisation 302 CN=Some Name 303 | 1=pod 2 3=for comment openssl_manual_section:5 4 5=head1 NAME 6 7x509v3_config - X509 V3 certificate extension configuration format 8 --- 287 unchanged lines hidden (view full) --- 296 indirectCRL=TRUE 297 onlysomereasons=keyCompromise, CACompromise 298 299 [issuer_sect] 300 C=UK 301 O=Organisation 302 CN=Some Name 303 |
304 | 304 |
305=head2 Certificate Policies. 306 307This is a I<raw> extension. All the fields of this extension can be set by 308using the appropriate syntax. 309 310If you follow the PKIX recommendations and just using one OID then you just 311include the value of that OID. Multiple OIDs can be set separated by commas, 312for example: --- 72 unchanged lines hidden (view full) --- 385 386Examples: 387 388 nameConstraints=permitted;IP:192.168.0.0/255.255.0.0 389 390 nameConstraints=permitted;email:.somedomain.com 391 392 nameConstraints=excluded;email:.com | 305=head2 Certificate Policies. 306 307This is a I<raw> extension. All the fields of this extension can be set by 308using the appropriate syntax. 309 310If you follow the PKIX recommendations and just using one OID then you just 311include the value of that OID. Multiple OIDs can be set separated by commas, 312for example: --- 72 unchanged lines hidden (view full) --- 385 386Examples: 387 388 nameConstraints=permitted;IP:192.168.0.0/255.255.0.0 389 390 nameConstraints=permitted;email:.somedomain.com 391 392 nameConstraints=excluded;email:.com |
393issuingDistributionPoint = idp_section | |
394 | 393 |
394 |
|
395=head2 OCSP No Check 396 397The OCSP No Check extension is a string extension but its value is ignored. 398 399Example: 400 401 noCheck = ignored 402 --- 127 unchanged lines hidden --- | 395=head2 OCSP No Check 396 397The OCSP No Check extension is a string extension but its value is ignored. 398 399Example: 400 401 noCheck = ignored 402 --- 127 unchanged lines hidden --- |