OLD | NEW |
| (Empty) |
1 CA_DIR=out | |
2 CA_NAME=policy-root | |
3 | |
4 [ca] | |
5 default_ca = CA_root | |
6 preserve = yes | |
7 | |
8 [CA_root] | |
9 dir = ${ENV::CA_DIR} | |
10 key_size = 2048 | |
11 algo = sha256 | |
12 database = $dir/${ENV::CA_NAME}-index.txt | |
13 new_certs_dir = $dir | |
14 serial = $dir/${ENV::CA_NAME}-serial | |
15 certificate = $dir/${ENV::CA_NAME}.pem | |
16 private_key = $dir/${ENV::CA_NAME}.key | |
17 RANDFILE = $dir/.rand | |
18 default_days = 3650 | |
19 default_crl_days = 30 | |
20 default_md = sha256 | |
21 policy = policy_anything | |
22 unique_subject = no | |
23 copy_extensions = copy | |
24 | |
25 [user_cert] | |
26 basicConstraints = critical, CA:false | |
27 extendedKeyUsage = serverAuth, clientAuth | |
28 certificatePolicies = 1.2.3.4 | |
29 | |
30 [ca_cert] | |
31 basicConstraints = critical, CA:true | |
32 keyUsage = critical, digitalSignature, keyCertSign, cRLSign | |
33 | |
34 [intermediate_cert] | |
35 basicConstraints = critical, CA:true | |
36 keyUsage = critical, digitalSignature, keyCertSign, cRLSign | |
37 policyConstraints = requireExplicitPolicy:0 | |
38 certificatePolicies = 1.2.3.4, 1.2.3.4.5, 1.2.3.5 | |
39 | |
40 [policy_anything] | |
41 # Default signing policy | |
42 countryName = optional | |
43 stateOrProvinceName = optional | |
44 localityName = optional | |
45 organizationName = optional | |
46 organizationalUnitName = optional | |
47 commonName = optional | |
48 emailAddress = optional | |
49 | |
50 [req] | |
51 default_bits = 2048 | |
52 default_md = sha256 | |
53 string_mask = utf8only | |
54 prompt = no | |
55 encrypt_key = no | |
56 distinguished_name = req_env_dn | |
57 | |
58 [req_env_dn] | |
59 CN = ${ENV::COMMON_NAME} | |
60 | |
OLD | NEW |