add CA extensions to make valid CA certs

diff --git a/bin/generate-ca-certificates-for-cvs.sh b/bin/generate-ca-certificates-for-cvs.sh
index 3a2ed66..b4ba975 100755 (executable)
--- a/bin/generate-ca-certificates-for-cvs.sh
+++ b/bin/generate-ca-certificates-for-cvs.sh
@@ -45,7 +45,7 @@ function create_ca {
 
         export CN="the $catype CA"
         openssl req -new -x509 -out ${catype}.cert $DAYS -nodes \
-            -keyout ${catype}.priv -config req_conf.cnf 
+            -keyout ${catype}.priv -config req_conf.cnf -extensions CA_cert
         openssl pkcs12 -export -in ${catype}.cert -inkey ${catype}.priv \
             -out ${catype}.p12 -passin "pass:$PASSWORD" -passout "pass:$PASSWORD"
         echo -n "Generated CA certificate with "