1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980 |
- ####################################################################
- [ ca ]
- default_ca = CA_default # The default ca section
- ####################################################################
- [ CA_default ]
- dir = ./demoCA # Where everything is kept
- certs = $dir/certs # Where the issued certs are kept
- crl_dir = $dir/crl # Where the issued crl are kept
- database = $dir/index.txt # database index file.
- new_certs_dir = $dir/new_certs # default place for new certs.
- certificate = $dir/CAcert.pem # The CA certificate
- serial = $dir/serial # The current serial number
- crl = $dir/crl.pem # The current CRL
- private_key = $dir/private/CAkey.pem# The private key
- default_days = 365 # how long to certify for
- default_crl_days= 30 # how long before next CRL
- default_md = md5 # which md to use.
- # A few difference way of specifying how similar the request should look
- # For type CA, the listed attributes must be the same, and the optional
- # and supplied fields are just that :-)
- policy = policy_match
- # For the CA policy
- [ policy_match ]
- countryName = match
- stateOrProvinceName = match
- organizationName = match
- organizationalUnitName = optional
- commonName = supplied
- emailAddress = optional
- # For the 'anything' policy
- # At this point in time, you must list all acceptable 'object'
- # types.
- [ policy_anything ]
- countryName = optional
- stateOrProvinceName = optional
- localityName = optional
- organizationName = optional
- organizationalUnitName = optional
- commonName = supplied
- emailAddress = optional
- ####################################################################
- [ req ]
- distinguished_name = req_distinguished_name
- encrypt_rsa_key = no
- # Make altreq be identical to req
- [ altreq ]
- distinguished_name = req_distinguished_name
- encrypt_rsa_key = no
- [ req_distinguished_name ]
- countryName = C field
- countryName_value = AU
- stateOrProvinceName = SP field
- stateOrProvinceName_value =
- localityName = L field
- localityName_value = Brisbane
- organizationName = O field
- organizationName_value = CryptSoft Pty Ltd
- organizationalUnitName = OU field
- organizationalUnitName_value = .
- commonName = CN field
- commonName_value = Eric Young
- emailAddress = email field
- emailAddress_value = eay@mincom.oz.au
- [ dirname_sec ]
- C = UK
- O = My Organization
- OU = My Unit
- CN = My Name
|