Include o,ou in certificate, add AVA escaping

[gigi.git] / keys / selfsign.config

diff --git a/keys/selfsign.config b/keys/selfsign.config
index 1b98363a30c5f2c644c81c8dffb0e6f918abe3cf..2b0f5a75f6e9aa14e0bea6678e0c94dd48e819ed 100644 (file)
--- a/keys/selfsign.config
+++ b/keys/selfsign.config
@@ -3,8 +3,6 @@ distinguished_name=dn
 #req_extensions=ext
 
 [dn]
-commonName = cn
-
 [ext]
 subjectAltName=
 
@@ -12,9 +10,9 @@ subjectAltName=
 default_ca=ca1
 
 [ca1]
-new_certs_dir=testca/newcerts
-database=testca/db
-serial=testca/serial
+new_certs_dir=newcerts
+database=db
+serial=serial
 default_md=sha256
 email_in_dn=salat
 policy=ca1_pol
@@ -33,3 +31,9 @@ extendedKeyUsage        = clientAuth, serverAuth, nsSGC, msSGC
 [ca1_pol]
 commonName              = optional
 subjectAltName          = optional
+organizationName       = optional
+organizationalUnitName = optional
+emailAddress           = optional
+countryName            = optional
+stateOrProvinceName    = optional
+localityName           = optional