[Keys] a certificate structure that looks like the planned future.

[gigi.git] / keys / selfsign.config

diff --git a/keys/selfsign.config b/keys/selfsign.config
index 1b98363a30c5f2c644c81c8dffb0e6f918abe3cf..2e3ea576c5008bf0dc038babd9e4cd601a9d2cab 100644 (file)
--- a/keys/selfsign.config
+++ b/keys/selfsign.config
@@ -3,8 +3,6 @@ distinguished_name=dn
 #req_extensions=ext
 
 [dn]
-commonName = cn
-
 [ext]
 subjectAltName=
 
@@ -12,9 +10,9 @@ subjectAltName=
 default_ca=ca1
 
 [ca1]
-new_certs_dir=testca/newcerts
-database=testca/db
-serial=testca/serial
+new_certs_dir=newcerts
+database=db
+serial=serial
 default_md=sha256
 email_in_dn=salat
 policy=ca1_pol
@@ -33,3 +31,6 @@ extendedKeyUsage        = clientAuth, serverAuth, nsSGC, msSGC
 [ca1_pol]
 commonName              = optional
 subjectAltName          = optional
+organizationName       = optional
+organizationalUnitName = optional
+emailAddress           = optional
\ No newline at end of file