| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778 |
- ####################################################################
- [ ca ]
- default_ca = CA_default # The default ca section
- ####################################################################
- [ CA_default ]
- dir = ./demoCA # Where everything is kept
- certs = $dir/certs # Where the issued certs are kept
- crl_dir = $dir/crl # Where the issued crl are kept
- database = $dir/index.txt # database index file.
- new_certs_dir = $dir/new_certs # default place for new certs.
- certificate = $dir/CAcert.pem # The CA certificate
- serial = $dir/serial # The current serial number
- crl = $dir/crl.pem # The current CRL
- private_key = $dir/private/CAkey.pem# The private key
- default_days = 365 # how long to certify for
- default_crl_days= 30 # how long before next CRL
- default_md = md5 # which md to use.
- # A few difference way of specifying how similar the request should look
- # For type CA, the listed attributes must be the same, and the optional
- # and supplied fields are just that :-)
- policy = policy_match
- # For the CA policy
- [ policy_match ]
- countryName = match
- stateOrProvinceName = match
- organizationName = match
- organizationalUnitName = optional
- commonName = supplied
- emailAddress = optional
- # For the 'anything' policy
- # At this point in time, you must list all acceptable 'object'
- # types.
- [ policy_anything ]
- countryName = optional
- stateOrProvinceName = optional
- localityName = optional
- organizationName = optional
- organizationalUnitName = optional
- commonName = supplied
- emailAddress = optional
- ####################################################################
- [ req ]
- default_bits = 2048
- default_keyfile = testkey.pem
- distinguished_name = req_distinguished_name
- encrypt_rsa_key = no
- # Make altreq be identical to req
- [ altreq ]
- default_bits = 2048
- default_keyfile = testkey.pem
- distinguished_name = req_distinguished_name
- encrypt_rsa_key = no
- [ req_distinguished_name ]
- countryName = C field
- countryName_value = AU
- stateOrProvinceName = SP field
- stateOrProvinceName_value =
- localityName = L field
- localityName_value = Brisbane
- organizationName = O field
- organizationName_value = CryptSoft Pty Ltd
- organizationalUnitName = OU field
- organizationalUnitName_value = .
- commonName = CN field
- commonName_value = Eric Young
- emailAddress = email field
- emailAddress_value = eay@mincom.oz.au
|
