From 5e4cc6ca03da2134d1661c17cb0add14012cd465 Mon Sep 17 00:00:00 2001 From: "Jose I. Paris" Date: Wed, 9 Jul 2025 14:23:37 +0200 Subject: [PATCH] update deployment file CA instructions Signed-off-by: Jose I. Paris --- deployment/chainloop/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment/chainloop/README.md b/deployment/chainloop/README.md index 742b3f30f..13449556c 100644 --- a/deployment/chainloop/README.md +++ b/deployment/chainloop/README.md @@ -396,7 +396,7 @@ For example, these commands generate a self-signed certificate with an RSA priva ```bash > openssl genrsa -aes256 -out ca.key 4096 ... -> openssl req -new -x509 -sha256 -key ca.key -out ca.crt -days 365 +> openssl req -new -x509 -sha256 -key ca.key -out ca.crt -addext "basicConstraints=CA:TRUE" --addext "keyUsage=keyCertSign, cRLSign" -days 365 ... ```