From: Arran Cudbard-Bell Date: Thu, 5 May 2016 17:22:33 +0000 (-0400) Subject: Fixup example certs X-Git-Tag: branch_3_1_x~401 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4e8b20c0625bbc6cb49ecc0a5d739bb3572c834e;p=thirdparty%2Ffreeradius-server.git Fixup example certs --- diff --git a/raddb/certs/ca.cnf b/raddb/certs/ca.cnf index 59b8fad3942..104850533f2 100644 --- a/raddb/certs/ca.cnf +++ b/raddb/certs/ca.cnf @@ -50,7 +50,7 @@ x509_extensions = v3_ca countryName = FR stateOrProvinceName = Radius localityName = Somewhere -organizationName = Example Inc. +organizationName = Example Inc emailAddress = admin@example.org commonName = "Example Certificate Authority" diff --git a/raddb/certs/client.cnf b/raddb/certs/client.cnf index c5b31a56999..8f0f811f558 100644 --- a/raddb/certs/client.cnf +++ b/raddb/certs/client.cnf @@ -36,7 +36,8 @@ stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional -commonName = supplied +commonName = optional +subjectAltName = supplied emailAddress = optional [ req ] @@ -50,9 +51,12 @@ output_password = whatever countryName = FR stateOrProvinceName = Radius localityName = Somewhere -organizationName = Example Inc. -emailAddress = user@example.org -commonName = user@example.org +organizationName = Example Inc +emailAddress = user.example@example.org +commonName = Example user + +# Should be the user's NAI as per RFC 5216 (EAP-TLS) +subjectAltName = user@example.org [ v3_client ] basicConstraints = CA:FALSE diff --git a/raddb/certs/ocsp.cnf b/raddb/certs/ocsp.cnf index 0925934bdfe..7ae72645654 100644 --- a/raddb/certs/ocsp.cnf +++ b/raddb/certs/ocsp.cnf @@ -50,9 +50,10 @@ output_password = whatever countryName = FR stateOrProvinceName = Radius localityName = Somewhere -organizationName = Example Inc. +organizationName = Example Inc emailAddress = admin@example.org commonName = "Example OCSP Responder Certificate" +subjectAltName = ocsp.example.org [ v3_ocsp ] basicConstraints = CA:FALSE diff --git a/raddb/certs/server.cnf b/raddb/certs/server.cnf index f2d9fef5a21..5a8237f277e 100644 --- a/raddb/certs/server.cnf +++ b/raddb/certs/server.cnf @@ -50,9 +50,10 @@ output_password = whatever countryName = FR stateOrProvinceName = Radius localityName = Somewhere -organizationName = Example Inc. +organizationName = Example Inc emailAddress = admin@example.org commonName = "Example Server Certificate" +subjectAltName = radius.example.org [ v3_radius ] basicConstraints = CA:FALSE