2
0

CAss.cnf 2.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576
  1. #
  2. # SSLeay example configuration file.
  3. # This is mostly being used for generation of certificate requests.
  4. #
  5. RANDFILE = ./.rnd
  6. ####################################################################
  7. [ req ]
  8. default_bits = 2048
  9. default_keyfile = keySS.pem
  10. distinguished_name = req_distinguished_name
  11. encrypt_rsa_key = no
  12. default_md = sha1
  13. [ req_distinguished_name ]
  14. countryName = Country Name (2 letter code)
  15. countryName_default = AU
  16. countryName_value = AU
  17. organizationName = Organization Name (eg, company)
  18. organizationName_value = Dodgy Brothers
  19. commonName = Common Name (eg, YOUR name)
  20. commonName_value = Dodgy CA
  21. ####################################################################
  22. [ ca ]
  23. default_ca = CA_default # The default ca section
  24. ####################################################################
  25. [ CA_default ]
  26. dir = ./demoCA # Where everything is kept
  27. certs = $dir/certs # Where the issued certs are kept
  28. crl_dir = $dir/crl # Where the issued crl are kept
  29. database = $dir/index.txt # database index file.
  30. #unique_subject = no # Set to 'no' to allow creation of
  31. # several certificates with same subject.
  32. new_certs_dir = $dir/newcerts # default place for new certs.
  33. certificate = $dir/cacert.pem # The CA certificate
  34. serial = $dir/serial # The current serial number
  35. crl = $dir/crl.pem # The current CRL
  36. private_key = $dir/private/cakey.pem# The private key
  37. RANDFILE = $dir/private/.rand # private random number file
  38. x509_extensions = v3_ca # The extensions to add to the cert
  39. name_opt = ca_default # Subject Name options
  40. cert_opt = ca_default # Certificate field options
  41. default_days = 365 # how long to certify for
  42. default_crl_days= 30 # how long before next CRL
  43. default_md = md5 # which md to use.
  44. preserve = no # keep passed DN ordering
  45. policy = policy_anything
  46. [ policy_anything ]
  47. countryName = optional
  48. stateOrProvinceName = optional
  49. localityName = optional
  50. organizationName = optional
  51. organizationalUnitName = optional
  52. commonName = supplied
  53. emailAddress = optional
  54. [ v3_ca ]
  55. subjectKeyIdentifier=hash
  56. authorityKeyIdentifier=keyid:always,issuer:always
  57. basicConstraints = critical,CA:true,pathlen:1
  58. keyUsage = cRLSign, keyCertSign
  59. issuerAltName=issuer:copy