node-opcua-pki 6.10.0 → 6.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/bin/pki.mjs CHANGED
@@ -2391,9 +2391,14 @@ keyUsage = nonRepudiation, digitalSignature, keyEncipherment, d
2391
2391
  extendedKeyUsage = critical,serverAuth ,clientAuth
2392
2392
  subjectAltName = $ENV::ALTNAME
2393
2393
  nsComment = "CA Generated by Node-OPCUA Certificate utility using openssl"
2394
+ [ v3_ca_req ]
2395
+ subjectKeyIdentifier = hash
2396
+ basicConstraints = CA:TRUE
2397
+ keyUsage = critical, cRLSign, keyCertSign
2398
+ nsComment = "CA CSR generated by Node-OPCUA Certificate utility using openssl"
2394
2399
  [ v3_ca ]
2395
2400
  subjectKeyIdentifier = hash
2396
- authorityKeyIdentifier = keyid
2401
+ authorityKeyIdentifier = keyid:always,issuer:always
2397
2402
  basicConstraints = CA:TRUE
2398
2403
  keyUsage = critical, cRLSign, keyCertSign
2399
2404
  nsComment = "CA Certificate generated by Node-OPCUA Certificate utility using openssl"
@@ -2492,7 +2497,7 @@ async function construct_CertificateAuthority(certificateAuthority) {
2492
2497
  await generatePrivateKeyFile2(privateKeyFilename, keySize);
2493
2498
  displayTitle("Generate a certificate request for the CA key");
2494
2499
  await execute_openssl(
2495
- "req -new -sha256 -text -extensions v3_ca" + configOption + " -key " + q3(n4(privateKeyFilename)) + " -out " + q3(n4(csrFilename)) + " " + subjectOpt,
2500
+ "req -new -sha256 -text -extensions v3_ca_req" + configOption + " -key " + q3(n4(privateKeyFilename)) + " -out " + q3(n4(csrFilename)) + " " + subjectOpt,
2496
2501
  options
2497
2502
  );
2498
2503
  displayTitle("Generate CA Certificate (self-signed)");