53 lines
1.1 KiB
INI
53 lines
1.1 KiB
INI
[ ca ]
|
|
default_ca = testca
|
|
|
|
[ testca ]
|
|
dir = .
|
|
certificate = $dir/cacert.pem
|
|
database = $dir/index.txt
|
|
new_certs_dir = $dir/certs
|
|
private_key = $dir/private/cakey.pem
|
|
serial = $dir/serial
|
|
|
|
default_crl_days = 7
|
|
default_days = 365
|
|
default_md = sha1
|
|
|
|
policy = testca_policy
|
|
x509_extensions = certificate_extensions
|
|
|
|
[ testca_policy ]
|
|
commonName = supplied
|
|
stateOrProvinceName = optional
|
|
countryName = optional
|
|
emailAddress = optional
|
|
organizationName = optional
|
|
organizationalUnitName = optional
|
|
|
|
[ certificate_extensions ]
|
|
basicConstraints = CA:false
|
|
|
|
[ req ]
|
|
default_bits = 2048
|
|
default_keyfile = ./private/cakey.pem
|
|
default_md = sha1
|
|
prompt = yes
|
|
distinguished_name = root_ca_distinguished_name
|
|
x509_extensions = root_ca_extensions
|
|
|
|
[ root_ca_distinguished_name ]
|
|
commonName = hostname
|
|
|
|
[ root_ca_extensions ]
|
|
basicConstraints = CA:true
|
|
keyUsage = keyCertSign, cRLSign
|
|
|
|
[ client_ca_extensions ]
|
|
basicConstraints = CA:false
|
|
keyUsage = digitalSignature
|
|
extendedKeyUsage = 1.3.6.1.5.5.7.3.2
|
|
|
|
[ server_ca_extensions ]
|
|
basicConstraints = CA:false
|
|
keyUsage = keyEncipherment
|
|
extendedKeyUsage = 1.3.6.1.5.5.7.3.1 |