test.cnf 2.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374
  1. ####################################################################
  2. [ ca ]
  3. default_ca = CA_default # The default ca section
  4. ####################################################################
  5. [ CA_default ]
  6. dir = ./demoCA # Where everything is kept
  7. certs = $dir/certs # Where the issued certs are kept
  8. crl_dir = $dir/crl # Where the issued crl are kept
  9. database = $dir/index.txt # database index file.
  10. new_certs_dir = $dir/new_certs # default place for new certs.
  11. certificate = $dir/CAcert.pem # The CA certificate
  12. serial = $dir/serial # The current serial number
  13. crl = $dir/crl.pem # The current CRL
  14. private_key = $dir/private/CAkey.pem# The private key
  15. default_days = 365 # how long to certify for
  16. default_crl_days= 30 # how long before next CRL
  17. default_md = md5 # which md to use.
  18. # A few difference way of specifying how similar the request should look
  19. # For type CA, the listed attributes must be the same, and the optional
  20. # and supplied fields are just that :-)
  21. policy = policy_match
  22. # For the CA policy
  23. [ policy_match ]
  24. countryName = match
  25. stateOrProvinceName = match
  26. organizationName = match
  27. organizationalUnitName = optional
  28. commonName = supplied
  29. emailAddress = optional
  30. # For the 'anything' policy
  31. # At this point in time, you must list all acceptable 'object'
  32. # types.
  33. [ policy_anything ]
  34. countryName = optional
  35. stateOrProvinceName = optional
  36. localityName = optional
  37. organizationName = optional
  38. organizationalUnitName = optional
  39. commonName = supplied
  40. emailAddress = optional
  41. ####################################################################
  42. [ req ]
  43. distinguished_name = req_distinguished_name
  44. encrypt_rsa_key = no
  45. # Make altreq be identical to req
  46. [ altreq ]
  47. distinguished_name = req_distinguished_name
  48. encrypt_rsa_key = no
  49. [ req_distinguished_name ]
  50. countryName = C field
  51. countryName_value = AU
  52. stateOrProvinceName = SP field
  53. stateOrProvinceName_value =
  54. localityName = L field
  55. localityName_value = Brisbane
  56. organizationName = O field
  57. organizationName_value = CryptSoft Pty Ltd
  58. organizationalUnitName = OU field
  59. organizationalUnitName_value = .
  60. commonName = CN field
  61. commonName_value = Eric Young
  62. emailAddress = email field
  63. emailAddress_value = eay@mincom.oz.au