add key usage extensions

diff --git a/config/req_conf.cnf b/config/req_conf.cnf
index 7c30db9..45cac0e 100644 (file)
--- a/config/req_conf.cnf
+++ b/config/req_conf.cnf
@@ -29,5 +29,6 @@ commonName                     = $ENV::CN
 basicConstraints = CA:true\r
 subjectKeyIdentifier=hash\r
 authorityKeyIdentifier=keyid:always,issuer:always\r
+keyUsage = cRLSign, keyCertSign\r
 \r
 [ proxy_none ]\r