Using openssl to create a self signed certificate. The certificate needs to have the Basic Constraints value defined and showing in the cert but I can't seem to be finding the right location to modify in the openssl.cnf file. So far all of my certs are missing this field so I must be editing the cnf file wrong. Does anyone know what I need to change in the cnf file to make this happen. Running openssl 1.0.1f. I'm also using the -extfile in my x509 command for the SAN if that matters. (There is a section in the file that talks about adding extentions if you are using -extfile.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.