blob: 9ebd56a9480c102cffb1ba2b70564580272a8e73 [file] [log] [blame]
David Benjamin33b56922022-12-31 17:16:53 -05001# [ req_DN ]
2commonName = "Common Name"
3commonName_value = "CA"
4
5####################################################################
6[ req ]
7default_bits = 2432
8default_keyfile = cakey.pem
9default_md = sha256
10distinguished_name = req_DN
11string_mask = utf8only
12x509_extensions = v3_selfsign
13
14[ req_DN ]
15commonName = "Common Name"
16commonName_value = "CA"
17
18[ v3_selfsign ]
19basicConstraints = critical,CA:true
20keyUsage = keyCertSign
21subjectKeyIdentifier=hash
22
23####################################################################
24[ ca ]
25default_ca = CA_default # The default ca section
26
27####################################################################
28[ CA_default ]
29
30dir = ./demoCA
31certificate = ./demoCA/cacert.pem
32serial = ./demoCA/serial
33private_key = ./demoCA/private/cakey.pem
34new_certs_dir = ./demoCA/newcerts
35
36certificate = cacert.pem
37private_key = cakey.pem
38
39x509_extensions = v3_user
40
41name_opt = ca_default # Subject Name options
42cert_opt = ca_default # Certificate field options
43
44policy = policy_anything
45
46[ policy_anything ]
47countryName = optional
48stateOrProvinceName = optional
49localityName = optional
50organizationName = optional
51organizationalUnitName = optional
52commonName = supplied
53emailAddress = optional
54
55[ v3_user ]
56basicConstraints=critical,CA:FALSE
57subjectKeyIdentifier=hash
58authorityKeyIdentifier=keyid,issuer
59issuerAltName=issuer:copy
60