Add note about extfile change needed for Android 11+
parent
394be0f44a
commit
ebc64386b2
|
@ -33,7 +33,7 @@ openssl req -new -key bitwarden.key -out bitwarden.csr
|
|||
Create a text file `bitwarden.ext` with the following content, change the domain names to your setup.
|
||||
```
|
||||
authorityKeyIdentifier=keyid,issuer
|
||||
basicConstraints=CA:FALSE
|
||||
basicConstraints=CA:TRUE
|
||||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||||
extendedKeyUsage = serverAuth
|
||||
subjectAltName = @alt_names
|
||||
|
@ -51,6 +51,8 @@ openssl x509 -req -in bitwarden.csr -CA self-signed-ca-cert.crt -CAkey private-c
|
|||
```
|
||||
Note: As of April 2019 iOS 13+ and macOS 15+, the server certificate can not have an expiry > 825 and must include ExtendedKeyUsage extension https://support.apple.com/en-us/HT210176
|
||||
|
||||
Note: As of Android 11, the `basicConstraints` value must be set to `CA:TRUE` in order to be importable via the Settings app.
|
||||
|
||||
Add the root certificate and the bitwarden certificate to client computers.
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue