| Index: net/data/ssl/scripts/redundant-ca.cnf
|
| diff --git a/net/data/ssl/scripts/redundant-ca.cnf b/net/data/ssl/scripts/redundant-ca.cnf
|
| deleted file mode 100644
|
| index 5707b730bfbbc51356e104850f81fb8f4eed50b8..0000000000000000000000000000000000000000
|
| --- a/net/data/ssl/scripts/redundant-ca.cnf
|
| +++ /dev/null
|
| @@ -1,60 +0,0 @@
|
| -CA_DIR = out
|
| -
|
| -[ca]
|
| -default_ca = CA_root
|
| -preserve = yes
|
| -
|
| -# The default test root, used to generate certificates and CRLs.
|
| -[CA_root]
|
| -dir = ${ENV::CA_DIR}
|
| -database = ${dir}/${ENV::CERTIFICATE}-index.txt
|
| -new_certs_dir = ${dir}
|
| -serial = ${dir}/${ENV::CERTIFICATE}-serial
|
| -certificate = ${dir}/${ENV::CERTIFICATE}.pem
|
| -private_key = ${dir}/${ENV::CERTIFICATE}.key
|
| -RANDFILE = ${dir}/rand
|
| -default_days = 3650
|
| -default_crl_days = 30
|
| -default_md = sha256
|
| -policy = policy_anything
|
| -unique_subject = no
|
| -
|
| -[user_cert]
|
| -# Extensions to add when signing a request for an EE cert
|
| -basicConstraints = critical, CA:false
|
| -subjectKeyIdentifier = hash
|
| -authorityKeyIdentifier = keyid:always
|
| -extendedKeyUsage = serverAuth,clientAuth
|
| -
|
| -[ca_cert]
|
| -# Extensions to add when signing a request for an intermediate/CA cert
|
| -basicConstraints = critical, CA:true
|
| -subjectKeyIdentifier = hash
|
| -#authorityKeyIdentifier = keyid:always
|
| -keyUsage = critical, keyCertSign, cRLSign
|
| -
|
| -[crl_extensions]
|
| -# Extensions to add when signing a CRL
|
| -authorityKeyIdentifier = keyid:always
|
| -
|
| -[policy_anything]
|
| -# Default signing policy
|
| -countryName = optional
|
| -stateOrProvinceName = optional
|
| -localityName = optional
|
| -organizationName = optional
|
| -organizationalUnitName = optional
|
| -commonName = optional
|
| -emailAddress = optional
|
| -
|
| -[req]
|
| -# The request section used to generate certificate requests.
|
| -default_bits = 2048
|
| -default_md = sha256
|
| -string_mask = utf8only
|
| -prompt = no
|
| -encrypt_key = no
|
| -distinguished_name = req_env_dn
|
| -
|
| -[req_env_dn]
|
| -CN = ${ENV::CA_COMMON_NAME}
|
|
|