remove some extentions for certificate

This commit is contained in:
OttoMao 2016-05-02 14:23:01 +08:00
parent e0ecd528cb
commit 56961301c6
2 changed files with 7 additions and 6 deletions

View File

@ -35,12 +35,12 @@ function generateRootCA(){
cert.setSubject(attrs); cert.setSubject(attrs);
cert.setIssuer(attrs); cert.setIssuer(attrs);
cert.setExtensions([ cert.setExtensions([
{ name: 'basicConstraints', cA: true }, { name: 'basicConstraints', cA: true }
{ name: 'keyUsage', keyCertSign: true, digitalSignature: true, nonRepudiation: true, keyEncipherment: true, dataEncipherment: true }, // { name: 'keyUsage', keyCertSign: true, digitalSignature: true, nonRepudiation: true, keyEncipherment: true, dataEncipherment: true },
{ name: 'extKeyUsage', serverAuth: true, clientAuth: true, codeSigning: true, emailProtection: true, timeStamping: true }, // { name: 'extKeyUsage', serverAuth: true, clientAuth: true, codeSigning: true, emailProtection: true, timeStamping: true },
{ name: 'nsCertType', client: true, server: true, email: true, objsign: true, sslCA: true, emailCA: true, objCA: true }, // { name: 'nsCertType', client: true, server: true, email: true, objsign: true, sslCA: true, emailCA: true, objCA: true },
{ name: 'subjectAltName', altNames: [ { type: 6, /* URI */ value: 'http://example.org/webid#me' }, { type: 7, /* IP */ ip: '127.0.0.1' } ] }, // { name: 'subjectAltName', altNames: [ { type: 6, /* URI */ value: 'http://example.org/webid#me' }, { type: 7, /* IP */ ip: '127.0.0.1' } ] },
{ name: 'subjectKeyIdentifier' } // { name: 'subjectKeyIdentifier' }
]); ]);
cert.sign(keys.privateKey, forge.md.sha256.create()); cert.sign(keys.privateKey, forge.md.sha256.create());

View File

@ -18,6 +18,7 @@
"ip": "^0.3.2", "ip": "^0.3.2",
"juicer": "^0.6.6-stable", "juicer": "^0.6.6-stable",
"nedb": "^0.11.0", "nedb": "^0.11.0",
"node-forge": "^0.6.39",
"npm": "^2.7.0", "npm": "^2.7.0",
"promise": "^7.0.4", "promise": "^7.0.4",
"qrcode-npm": "0.0.3", "qrcode-npm": "0.0.3",