Skip to main content

Return to Answer

edited body
Source Link
Darren
Darren
  • 71.2k
  • 24
  • 141
  • 146

  1. copyCopy the policy from /etc/ssl/openssl.cnf to your configuration file

  2. rebuildRebuild all the file from beginning

  3. theThe policy section is like following:

 policy = policy_match # For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional

  1. copy the policy from /etc/ssl/openssl.cnf to your configuration file

  2. rebuild all the file from beginning

  3. the policy section is like following:

 policy = policy_match # For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional

  1. Copy the policy from /etc/ssl/openssl.cnf to your configuration file

  2. Rebuild all the file from beginning

  3. The policy section is like following:

 policy = policy_match # For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional
Source Link
Xusheng Li
Xusheng Li
  • 61
  • 1
  • 2

  1. copy the policy from /etc/ssl/openssl.cnf to your configuration file

  2. rebuild all the file from beginning

  3. the policy section is like following:

 policy = policy_match # For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional