Set more extensions

This commit is contained in:
Michael B. Gale
2026-02-10 18:07:27 +00:00
parent e8f0116911
commit d155ebf27f
2 changed files with 18 additions and 2 deletions

View File

@@ -121842,7 +121842,15 @@ function generateCertificateAuthority() {
cert.setIssuer(CERT_SUBJECT);
cert.setExtensions([
{ name: "basicConstraints", cA: true },
{ name: "keyUsage", keyCertSign: true, cRLSign: true }
{
name: "keyUsage",
critical: true,
keyCertSign: true,
cRLSign: true,
digitalSignature: true
},
{ name: "subjectKeyIdentifier" },
{ name: "authorityKeyIdentifier", keyIdentifier: true }
]);
cert.sign(keys.privateKey, import_node_forge.md.sha256.create());
const pem = import_node_forge.pki.certificateToPem(cert);

View File

@@ -88,7 +88,15 @@ function generateCertificateAuthority(): CertificateAuthority {
cert.setIssuer(CERT_SUBJECT);
cert.setExtensions([
{ name: "basicConstraints", cA: true },
{ name: "keyUsage", keyCertSign: true, cRLSign: true },
{
name: "keyUsage",
critical: true,
keyCertSign: true,
cRLSign: true,
digitalSignature: true,
},
{ name: "subjectKeyIdentifier" },
{ name: "authorityKeyIdentifier", keyIdentifier: true },
]);
cert.sign(keys.privateKey, md.sha256.create());