Correction : rule_user_* : droits.

[lhc/ateliers.git] / etc / openssl / ca.cfg

diff --git a/etc/openssl/ca.cfg b/etc/openssl/ca.cfg
index 2cd0e7d..17fe693 100644 (file)
--- a/etc/openssl/ca.cfg
+++ b/etc/openssl/ca.cfg
@@ -1,5 +1,5 @@
        HOME        = .
-       RANDFILE    = $HOME/var/lib/rand
+       RANDFILE    = var/sec/x509/openssl.rand
        oid_section = extra_oids
 [ extra_oids ]
        # Pour EVSSL
@@ -28,10 +28,10 @@
        subjectKeyIdentifier   = hash
        issuerAltName          = issuer:copy
        authorityKeyIdentifier = keyid:always,issuer:always
-       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/tls/crt.pem
-       crlDistributionPoints  = URI:http://www.$ENV::x509_host/tls/crl.pem
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
+       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/crl.pem
        #certificatePolicies    = @root_certificate_policies
-       #trustList              = ASN1:UTF8String:https://www.$ENV::x509_host/tls/trust.etl
+       #trustList              = ASN1:UTF8String:https://www.$ENV::x509_host/x509/trust.etl
        #policyConstraints      =
        #extendedKeyUsage       =
        #inhibitAnyPolicy       =