[CentOS] Why is localhost self-signed cert a CA cert?

Gordon Messmer yinyang at eburg.com
Wed Jan 9 01:15:13 UTC 2013


On 01/08/2013 04:42 PM, Robert Moskowitz wrote:
> CA:TRUE means it is a signing cert.  In RFC 5280, app C.2 end-entity cert:
>     (g)  the certificate is an end entity certificate, as the basic
>          constraints extension is not present;

OK.  If you want to suggest to Red Hat use "-extensions v3_req", you'll 
probably need to do so as a paying customer, in bugzilla.  "why" 
probably isn't a question for this list.  CentOS simply rebuilds the 
source that Red Hat provides.



More information about the CentOS mailing list