Interesting Snippets from 2021-03-03

• Wikis/Scripts+Configs/OpenSSL

  By default, the CA profile does not have a pathleen set, allowing it to sign an infinite number of CAs and ICAs; however, the ICA profile has a pathleen of 0, preventing it from signing any CA or ICA. CA & ICA keyUsage should not be altered, as the values set are the only values a CA or ICA should have.

[/snippets] permanent link