Intermediate CA with CA flag set to False
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
I am trying to configure a Certificate Authority with cfssl
One root CA with pathlen:1
One intermediate CA with pathlen:0
The following configuration files ,in attachment, generate an intermediate CA with the CA flag set to False and the pathlen flag is not set.
ca-csr.json
config.json
intermediate_ca-csr.json
Makefile
[cfssl-intermediate_ca.zip](https://github.com/cloudflare/cfssl/files/5363022/cfssl-intermediate_ca.zip)
`cfssl version
Version: 1.2.0
Revision: dev
Runtime: go1.6`
Using openssl on the generated intermediate certificate, you will see the CA flag is set to False and the pathlen flag is not set.
1/ Am I doing it wrong? How can I generate a intermediate CA with CA: True, pathlen:0
2/ By the way, how do I change the signature algorithm to sha256WithRSAEncryption?
By default it uses sha512. I tried "hash_algo": "SHA2". Didn't work.
Thank you for your feedback.
Happy Gnu!
Contributor guide
Assessment
This issue has not been assessed yet.