OLD | NEW |
1 CA_DIR=out | 1 CA_DIR=out |
2 CA_NAME=aia-test-root | 2 CA_NAME=aia-test-root |
3 AIA_URL=http://aia-test.invalid | 3 AIA_URL=http://aia-test.invalid |
4 | 4 |
5 [ca] | 5 [ca] |
6 default_ca = CA_root | 6 default_ca = CA_root |
7 preserve = yes | 7 preserve = yes |
8 | 8 |
9 [CA_root] | 9 [CA_root] |
10 dir = ${ENV::CA_DIR} | 10 dir = ${ENV::CA_DIR} |
11 key_size = 2048 | 11 key_size = 2048 |
12 algo = sha1 | 12 algo = sha256 |
13 database = $dir/${ENV::CA_NAME}-index.txt | 13 database = $dir/${ENV::CA_NAME}-index.txt |
14 new_certs_dir = $dir | 14 new_certs_dir = $dir |
15 serial = $dir/${ENV::CA_NAME}-serial | 15 serial = $dir/${ENV::CA_NAME}-serial |
16 certificate = $dir/${ENV::CA_NAME}.pem | 16 certificate = $dir/${ENV::CA_NAME}.pem |
17 private_key = $dir/${ENV::CA_NAME}.key | 17 private_key = $dir/${ENV::CA_NAME}.key |
18 RANDFILE = $dir/.rand | 18 RANDFILE = $dir/.rand |
19 default_days = 3650 | 19 default_days = 3650 |
20 default_crl_days = 30 | 20 default_crl_days = 30 |
21 default_md = sha1 | 21 default_md = sha256 |
22 policy = policy_anything | 22 policy = policy_anything |
23 unique_subject = no | 23 unique_subject = no |
24 copy_extensions = copy | 24 copy_extensions = copy |
25 | 25 |
26 [user_cert] | 26 [user_cert] |
27 basicConstraints = critical, CA:false | 27 basicConstraints = critical, CA:false |
28 extendedKeyUsage = serverAuth, clientAuth | 28 extendedKeyUsage = serverAuth, clientAuth |
29 authorityInfoAccess = caIssuers;URI:${ENV::AIA_URL} | 29 authorityInfoAccess = caIssuers;URI:${ENV::AIA_URL} |
30 | 30 |
31 [ca_cert] | 31 [ca_cert] |
32 basicConstraints = critical, CA:true | 32 basicConstraints = critical, CA:true |
33 keyUsage = critical, keyCertSign, cRLSign | 33 keyUsage = critical, keyCertSign, cRLSign |
34 | 34 |
35 [policy_anything] | 35 [policy_anything] |
36 # Default signing policy | 36 # Default signing policy |
37 countryName = optional | 37 countryName = optional |
38 stateOrProvinceName = optional | 38 stateOrProvinceName = optional |
39 localityName = optional | 39 localityName = optional |
40 organizationName = optional | 40 organizationName = optional |
41 organizationalUnitName = optional | 41 organizationalUnitName = optional |
42 commonName = optional | 42 commonName = optional |
43 emailAddress = optional | 43 emailAddress = optional |
44 | 44 |
45 [req] | 45 [req] |
46 default_bits = 2048 | 46 default_bits = 2048 |
47 default_md = sha1 | 47 default_md = sha256 |
48 string_mask = utf8only | 48 string_mask = utf8only |
49 prompt = no | 49 prompt = no |
50 encrypt_key = no | 50 encrypt_key = no |
51 distinguished_name = req_env_dn | 51 distinguished_name = req_env_dn |
52 | 52 |
53 [req_env_dn] | 53 [req_env_dn] |
54 CN = ${ENV::CA_COMMON_NAME} | 54 CN = ${ENV::CA_COMMON_NAME} |
55 | 55 |
OLD | NEW |