OLD | NEW |
1 SUBJECT_NAME = req_dn | 1 SUBJECT_NAME = req_dn |
2 KEY_SIZE = 2048 | 2 KEY_SIZE = 2048 |
3 | 3 |
4 [req] | 4 [req] |
5 default_bits = ${ENV::KEY_SIZE} | 5 default_bits = ${ENV::KEY_SIZE} |
6 default_md = sha1 | 6 default_md = sha256 |
7 string_mask = utf8only | 7 string_mask = utf8only |
8 prompt = no | 8 prompt = no |
9 encrypt_key = no | 9 encrypt_key = no |
10 distinguished_name = ${ENV::SUBJECT_NAME} | 10 distinguished_name = ${ENV::SUBJECT_NAME} |
11 req_extensions = req_extensions | 11 req_extensions = req_extensions |
12 | 12 |
13 [req_dn] | 13 [req_dn] |
14 C = US | 14 C = US |
15 ST = California | 15 ST = California |
16 L = Mountain View | 16 L = Mountain View |
17 O = Test CA | 17 O = Test CA |
18 CN = 127.0.0.1 | 18 CN = 127.0.0.1 |
19 | 19 |
20 [req_duplicate_cn_1] | 20 [req_duplicate_cn_1] |
21 O = Foo | 21 O = Foo |
22 CN = Duplicate | 22 CN = Duplicate |
23 | 23 |
24 [req_duplicate_cn_2] | 24 [req_duplicate_cn_2] |
25 O = Bar | 25 O = Bar |
26 CN = Duplicate | 26 CN = Duplicate |
27 | 27 |
| 28 [req_punycode_dn] |
| 29 CN = xn--wgv71a119e.com |
| 30 |
28 [req_extensions] | 31 [req_extensions] |
29 subjectAltName = IP:127.0.0.1 | 32 subjectAltName = IP:127.0.0.1 |
30 | 33 |
| 34 [req_punycode] |
| 35 basicConstraints = critical, CA:true |
| 36 subjectAltName = @punycode_san |
| 37 |
31 [req_san_sanity] | 38 [req_san_sanity] |
32 basicConstraints = critical, CA:true | 39 basicConstraints = critical, CA:true |
33 subjectAltName = @san_sanity | 40 subjectAltName = @san_sanity |
34 | 41 |
35 [san_sanity] | 42 [san_sanity] |
36 IP.1 = 127.0.0.2 | 43 IP.1 = 127.0.0.2 |
37 IP.2 = FE80::1 | 44 IP.2 = FE80::1 |
38 DNS = test.example | 45 DNS = test.example |
39 email = test@test.example | 46 email = test@test.example |
40 otherName = 1.2.3.4;UTF8:ignore me | 47 otherName = 1.2.3.4;UTF8:ignore me |
41 dirName = more_san_sanity | 48 dirName = more_san_sanity |
42 | 49 |
43 [req_spdy_pooling] | 50 [req_spdy_pooling] |
44 subjectAltName = @spdy_pooling | 51 subjectAltName = @spdy_pooling |
45 | 52 |
46 [more_san_sanity] | 53 [more_san_sanity] |
47 CN=127.0.0.3 | 54 CN=127.0.0.3 |
48 | 55 |
49 [spdy_pooling] | 56 [spdy_pooling] |
50 DNS.1 = www.example.org | 57 DNS.1 = www.example.org |
51 DNS.2 = mail.example.org | 58 DNS.2 = mail.example.org |
52 DNS.3 = mail.example.com | 59 DNS.3 = mail.example.com |
| 60 |
| 61 [punycode_san] |
| 62 DNS.1 = xn--wgv71a119e.com |
| 63 DNS.2 = *.xn--wgv71a119e.com |
| 64 DNS.3 = blahblahblahblah.com |
OLD | NEW |