Home Explore Help
Sign In
OWEALs
/
openssl
mirror of git://git.openssl.org/openssl.git
2
0
Fork 0
Files Issues 1 Wiki
Tree: f31ac32001
Branches Tags
openssl
/
test
/
ca-and-certs.cnf

ca-and-certs.cnf 2.2 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990 
  1. 

  2. CN2 = Brother 2
    3. 

  3. 

  4. ####################################################################
    5. 

  5. [ req ]
    6. 

  6. default_bits		= 2048
    7. 

  7. default_keyfile 	= keySS.pem
    8. 

  8. distinguished_name	= req_distinguished_name
    9. 

  9. encrypt_rsa_key		= no
    10. 

  10. default_md		= sha1
    11. 

  11. 

  12. [ req_distinguished_name ]
    13. 

  13. countryName			= Country Name (2 letter code)
    14. 

  14. countryName_value		= AU
    15. 

  15. organizationName		= Organization Name (eg, company)
    16. 

  16. organizationName_value		= Dodgy Brothers
    17. 

  17. commonName			= Common Name (eg, YOUR name)
    18. 

  18. commonName_value		= Dodgy CA
    19. 

  19. 

  20. ####################################################################
    21. 

  21. [ userreq ]
    22. 

  22. default_bits		= 2048
    23. 

  23. default_keyfile 	= keySS.pem
    24. 

  24. distinguished_name	= user_dn
    25. 

  25. encrypt_rsa_key		= no
    26. 

  26. default_md		= sha256
    27. 

  27. prompt			= no
    28. 

  28. 

  29. [ user_dn ]
    30. 

  30. countryName		= AU
    31. 

  31. organizationName	= Dodgy Brothers
    32. 

  32. 0.commonName		= Brother 1
    33. 

  33. 1.commonName		= $ENV::CN2
    34. 

  34. 

  35. [ v3_ee ]
    36. 

  36. subjectKeyIdentifier	= hash
    37. 

  37. authorityKeyIdentifier	= keyid,issuer:always
    38. 

  38. basicConstraints 	= CA:false
    39. 

  39. keyUsage		= nonRepudiation, digitalSignature, keyEncipherment
    40. 

  40. 

  41. [ v3_ee_dsa ]
    42. 

  42. subjectKeyIdentifier	= hash
    43. 

  43. authorityKeyIdentifier	= keyid:always
    44. 

  44. basicConstraints	= CA:false
    45. 

  45. keyUsage		= nonRepudiation, digitalSignature
    46. 

  46. 

  47. [ v3_ee_ec ]
    48. 

  48. subjectKeyIdentifier	= hash
    49. 

  49. authorityKeyIdentifier	= keyid:always
    50. 

  50. basicConstraints	= CA:false
    51. 

  51. keyUsage		= nonRepudiation, digitalSignature, keyAgreement
    52. 

  52. 

  53. ####################################################################
    54. 

  54. [ ca ]
    55. 

  55. default_ca	= CA_default
    56. 

  56. 

  57. [ CA_default ]
    58. 

  58. dir		= ./demoCA
    59. 

  59. certs		= $dir/certs
    60. 

  60. crl_dir		= $dir/crl
    61. 

  61. database	= $dir/index.txt
    62. 

  62. new_certs_dir	= $dir/newcerts
    63. 

  63. certificate	= $dir/cacert.pem
    64. 

  64. serial		= $dir/serial
    65. 

  65. crl		= $dir/crl.pem
    66. 

  66. private_key	= $dir/private/cakey.pem
    67. 

  67. x509_extensions	= v3_ca
    68. 

  68. name_opt 	= ca_default
    69. 

  69. cert_opt 	= ca_default
    70. 

  70. default_days	= 365
    71. 

  71. default_crl_days= 30
    72. 

  72. default_md	= sha1
    73. 

  73. preserve	= no
    74. 

  74. policy		= policy_anything
    75. 

  75. 

  76. [ policy_anything ]
    77. 

  77. countryName		= optional
    78. 

  78. stateOrProvinceName	= optional
    79. 

  79. localityName		= optional
    80. 

  80. organizationName	= optional
    81. 

  81. organizationalUnitName	= optional
    82. 

  82. commonName		= supplied
    83. 

  83. emailAddress		= optional
    84. 

  84. 

  85. [ v3_ca ]
    86. 

  86. subjectKeyIdentifier	= hash
    87. 

  87. authorityKeyIdentifier	= keyid:always,issuer:always
    88. 

  88. basicConstraints 	= critical,CA:true,pathlen:1
    89. 

  89. keyUsage		= cRLSign, keyCertSign
    90. 

  90. issuerAltName		= issuer:copy
    91.