Merge "upd: remove 'browser install'"
[gigi.git] / keys / selfsign.config
1 [req]
2 distinguished_name=dn
3 #req_extensions=ext
4
5 [dn]
6 [ext]
7 subjectAltName=
8
9 [ca]
10 default_ca=ca1
11
12 [ca1]
13 new_certs_dir=newcerts
14 database=db
15 serial=serial
16 default_md=sha256
17 email_in_dn=salat
18 policy=ca1_pol
19 #default_days=365
20 x509_extensions = v3_ca 
21
22
23
24 [ v3_ca ]
25
26 basicConstraints        = critical, CA:FALSE
27 keyUsage                = critical, digitalSignature, keyEncipherment, keyAgreement
28 extendedKeyUsage        = clientAuth, serverAuth, nsSGC, msSGC
29
30
31 [ca1_pol]
32 commonName              = optional
33 subjectAltName          = optional
34 organizationName        = optional
35 organizationalUnitName  = optional
36 emailAddress            = optional
37 countryName             = optional
38 stateOrProvinceName     = optional
39 localityName            = optional