keys/selfsign.config

   1 [req]
   2 distinguished_name=dn
   3 #req_extensions=ext
   4
   5 [dn]
   6 [ext]
   7 subjectAltName=
   8
   9 [ca]
  10 default_ca=ca1
  11
  12 [ca1]
  13 new_certs_dir=newcerts
  14 database=db
  15 serial=serial
  16 default_md=sha256
  17 email_in_dn=salat
  18 policy=ca1_pol
  19 #default_days=365
  20 x509_extensions = v3_ca
  21
  22
  23
  24 [ v3_ca ]
  25
  26 basicConstraints        = critical, CA:FALSE
  27 keyUsage                = critical, digitalSignature, keyEncipherment, keyAgreement
  28 extendedKeyUsage        = clientAuth, serverAuth, nsSGC, msSGC
  29
  30
  31 [ca1_pol]
  32 commonName              = optional
  33 subjectAltName          = optional
  34 organizationName        = optional
  35 organizationalUnitName  = optional
  36 emailAddress            = optional
  37 countryName             = optional
  38 stateOrProvinceName     = optional
  39 localityName            = optional