| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758 |
- #
- # Default configuration to use when one
- # is not provided on the command line.
- #
- [ ca ]
- default_ca = CA_request
- #
- # Default location of directories and
- # files needed to generate certificates.
- #
- [ CA_request ]
- dir = ./rootCA
- database = $dir/index.txt
- new_certs_dir = $dir/certs
- certificate = $dir/cacert.pem
- serial = $dir/serial
- private_key = $dir/private/cakey.pem
- #
- # Default expiration and encryption
- # policies for certificates.
- #
- default_days = 365
- default_crl_days = 1825
- default_md = sha1
- policy = req_policy
- #
- # Information to be moved from
- # request to the certificate
- #
- nameopt = ca_default
- certopt = ca_default
- copy_extensions = copy
- x509_extensions = cert_extensions
- #
- # The default policy to use when
- # generating the certificate.
- #
- [ req_policy ]
- countryName = supplied
- stateOrProvinceName = optional
- organizationName = supplied
- organizationalUnitName = optional
- commonName = supplied
- emailAddress = supplied
- [ cert_extensions ]
- basicConstraints = CA:false
|
