Added missing parts

bootstrap_intermediate.sh

@@ -4,5 +4,6 @@ cd intermediate
 mkdir -p certs crl csr newcerts private
 chmod 700 private
 touch index.txt
+touch index.txt.attr
 echo 1000 > serial
 echo 1000 > crlnumber

intermediate/openssl.cnf

@@ -122,6 +122,11 @@ authorityKeyIdentifier = keyid,issuer:always
 keyUsage = critical, digitalSignature, keyEncipherment
 extendedKeyUsage = serverAuth
 
+[ v3_req ]
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+
+
 [ crl_ext ]
 # Extension for CRLs (`man x509v3_config`).
 authorityKeyIdentifier=keyid:always