[UPDATE-CONFIG] Move the generated keys to a more resonable location.

[gigi.git] / keys / selfsign.config

diff --git a/keys/selfsign.config b/keys/selfsign.config
new file mode 100644 (file)
index 0000000..1b98363
--- /dev/null
+++ b/keys/selfsign.config
@@ -0,0 +1,35 @@
+[req]
+distinguished_name=dn
+#req_extensions=ext
+
+[dn]
+commonName = cn
+
+[ext]
+subjectAltName=
+
+[ca]
+default_ca=ca1
+
+[ca1]
+new_certs_dir=testca/newcerts
+database=testca/db
+serial=testca/serial
+default_md=sha256
+email_in_dn=salat
+policy=ca1_pol
+#default_days=365
+x509_extensions = v3_ca 
+
+
+
+[ v3_ca ]
+
+basicConstraints        = critical, CA:FALSE
+keyUsage                = critical, digitalSignature, keyEncipherment, keyAgreement
+extendedKeyUsage        = clientAuth, serverAuth, nsSGC, msSGC
+
+
+[ca1_pol]
+commonName              = optional
+subjectAltName          = optional