| OLD | NEW |
| 1 ID=1 | 1 ID=1 |
| 2 CA_DIR=out | 2 CA_DIR=out |
| 3 | 3 |
| 4 [ca] | 4 [ca] |
| 5 default_ca = ca_settings | 5 default_ca = ca_settings |
| 6 preserve = yes | 6 preserve = yes |
| 7 | 7 |
| 8 [ca_settings] | 8 [ca_settings] |
| 9 dir = ${ENV::CA_DIR} | 9 dir = ${ENV::CA_DIR} |
| 10 database = $dir/${ENV::ID}-index.txt | 10 database = $dir/${ENV::ID}-index.txt |
| (...skipping 24 matching lines...) Expand all Loading... |
| 35 string_mask = utf8only | 35 string_mask = utf8only |
| 36 prompt = no | 36 prompt = no |
| 37 encrypt_key = no | 37 encrypt_key = no |
| 38 distinguished_name = req_env_dn | 38 distinguished_name = req_env_dn |
| 39 | 39 |
| 40 [user_cert] | 40 [user_cert] |
| 41 # Extensions to add when signing a request for an EE cert | 41 # Extensions to add when signing a request for an EE cert |
| 42 basicConstraints = critical, CA:false | 42 basicConstraints = critical, CA:false |
| 43 extendedKeyUsage = serverAuth,clientAuth | 43 extendedKeyUsage = serverAuth,clientAuth |
| 44 | 44 |
| 45 [san_user_cert] |
| 46 subjectAltName = email:santest@example.com,otherName:msUPN;UTF8:santest@ad.corp.
example.com |
| 47 |
| 45 [ca_cert] | 48 [ca_cert] |
| 46 # Extensions to add when signing a request for an intermediate/CA cert | 49 # Extensions to add when signing a request for an intermediate/CA cert |
| 47 basicConstraints = critical, CA:true | 50 basicConstraints = critical, CA:true |
| 48 keyUsage = critical, keyCertSign, cRLSign | 51 keyUsage = critical, keyCertSign, cRLSign |
| 49 | 52 |
| 50 [req_env_dn] | 53 [req_env_dn] |
| 51 CN = ${ENV::COMMON_NAME} | 54 CN = ${ENV::COMMON_NAME} |
| OLD | NEW |