Add IPsec IKE Intermediate EKU to server certificates. The serverAuth EKU already added suffices for Windows clients, though strongswan docs suggest setting this as well.
Specify keyUsage and extendedKeyUsage in openssl.cnf, use crl_ext.
cherry pic from 'hotfix/3347-Certificate_Authority_SAN_names_not_working':
bugfix #3347: Certificate Authority SAN names not working in 2.1
subjectAltName can be set only via configuration file - created three extra sections in openssl.cnf to use in case of existing subjectAltName....
default openssl to 2048
When creating an internal certificate, offer the user a choice of what constraints to place upon the certificate (CA, Server, or User).
Create certificate for HTTP Server option
View revisions
Also available in: Atom