openssl.cnf 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. [ req ]
  2. default_bits = 1024
  3. default_keyfile = privkey.pem
  4. distinguished_name = req_distinguished_name
  5. attributes = req_attributes
  6. x509_extensions = v3_ca # The extensions to add to the self signed cert
  7. string_mask = MASK:4294967295
  8. [ req_distinguished_name ]
  9. countryName = Country Name (2 letter code)
  10. countryName_default = AU
  11. countryName_min = 2
  12. countryName_max = 2
  13. stateOrProvinceName = State or Province Name (full name)
  14. stateOrProvinceName_default = Some-State
  15. localityName = Locality Name (eg, city)
  16. 0.organizationName = Organization Name (eg, company)
  17. 0.organizationName_default = Internet Widgits Pty Ltd
  18. organizationalUnitName = Organizational Unit Name (eg, section)
  19. commonName = Common Name (eg, YOUR name)
  20. commonName_max = 64
  21. emailAddress = Email Address
  22. emailAddress_max = 64
  23. [ req_attributes ]
  24. challengePassword = A challenge password
  25. challengePassword_min = 4
  26. challengePassword_max = 20
  27. unstructuredName = An optional company name
  28. [ v3_req ]
  29. basicConstraints = CA:FALSE
  30. keyUsage = nonRepudiation, digitalSignature, keyEncipherment
  31. [ v3_ca ]
  32. subjectKeyIdentifier=hash
  33. authorityKeyIdentifier=keyid:always,issuer:always
  34. basicConstraints = CA:true
  35. [ usr_cert ]
  36. basicConstraints=CA:FALSE