2009-01-03 22:22:43 +01:00
|
|
|
##================================================================
|
|
|
|
|
##============== Example OpenSSL configuration file ==============
|
|
|
|
|
##================================================================
|
|
|
|
|
|
|
|
|
|
# References:
|
|
|
|
|
#
|
|
|
|
|
# /etc/ssl/openssl.conf
|
|
|
|
|
# http://www.openssl.org/docs/apps/config.html
|
|
|
|
|
# http://www.openssl.org/docs/apps/x509v3_config.html
|
|
|
|
|
|
|
|
|
|
[ ca ]
|
|
|
|
|
default_ca = my_ca
|
|
|
|
|
|
|
|
|
|
[ my_ca ]
|
|
|
|
|
certificate = test-ca.crt
|
|
|
|
|
private_key = test-ca.key
|
|
|
|
|
database = index
|
|
|
|
|
serial = serial
|
|
|
|
|
|
|
|
|
|
new_certs_dir = newcerts
|
|
|
|
|
default_crl_days = 60
|
|
|
|
|
default_days = 730
|
|
|
|
|
default_md = sha1
|
|
|
|
|
policy = my_policy
|
|
|
|
|
x509_extensions = v3_usr
|
|
|
|
|
|
|
|
|
|
[ my_policy ]
|
2009-01-14 23:44:12 +01:00
|
|
|
countryName = match
|
2009-01-03 22:22:43 +01:00
|
|
|
organizationName = match
|
|
|
|
|
commonName = supplied
|
|
|
|
|
|
|
|
|
|
[ req ]
|
|
|
|
|
distinguished_name = my_req_dn
|
|
|
|
|
x509_extensions = v3_ca
|
|
|
|
|
|
|
|
|
|
[ my_req_dn ]
|
|
|
|
|
countryName = Country Name..............
|
2009-01-14 23:44:12 +01:00
|
|
|
countryName_default = NL
|
|
|
|
|
organizationName = Organization Name.........
|
|
|
|
|
organizationName_default = PolarSSL
|
2009-01-03 22:22:43 +01:00
|
|
|
commonName = Common Name (required)....
|
|
|
|
|
commonName_max = 64
|
|
|
|
|
|
|
|
|
|
[ v3_ca ]
|
|
|
|
|
basicConstraints = CA:TRUE
|
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
|
authorityKeyIdentifier = keyid:always,issuer:always
|
|
|
|
|
|
|
|
|
|
[ v3_usr ]
|
|
|
|
|
basicConstraints = CA:FALSE
|
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
|
authorityKeyIdentifier = keyid,issuer
|
