From 26dd7af5418c02b8a166bffc80580ec4023d283c Mon Sep 17 00:00:00 2001 From: Richard T Bonhomme Date: Fri, 29 Apr 2022 14:20:53 +0100 Subject: [PATCH] Add label '%COPY_EXTS%' for --copy-ext feature Signed-off-by: Richard T Bonhomme --- easyrsa3/openssl-easyrsa.cnf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/easyrsa3/openssl-easyrsa.cnf b/easyrsa3/openssl-easyrsa.cnf index 7c45bcf..928b195 100644 --- a/easyrsa3/openssl-easyrsa.cnf +++ b/easyrsa3/openssl-easyrsa.cnf @@ -21,6 +21,9 @@ RANDFILE = $dir/.rand # private random number file x509_extensions = basic_exts # The extensions to add to the cert +# A placeholder to handle the --copy-ext feature: +#%COPY_EXTS% # Do NOT remove or change this line as --copy-ext support requires it + # This allows a V2 CRL. Ancient browsers don't like it, but anything Easy-RSA # is designed for will. In return, we get the Issuer attached to CRLs. crl_extensions = crl_ext