openssl.cnf 1.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. oid_section = new_oids
  2. [ new_oids ]
  3. # Example policies to test their
  4. tsa_policy1 = 1.2.3.4.1
  5. tsa_policy2 = 1.2.3.4.5.6
  6. [ req ]
  7. default_bits = 1024
  8. default_keyfile = privkey.pem
  9. distinguished_name = req_distinguished_name
  10. attributes = req_attributes
  11. x509_extensions = v3_ca # The extensions to add to the self signed cert
  12. string_mask = MASK:4294967295
  13. [ req_distinguished_name ]
  14. countryName = Country Name (2 letter code)
  15. countryName_default = AU
  16. countryName_min = 2
  17. countryName_max = 2
  18. stateOrProvinceName = State or Province Name (full name)
  19. stateOrProvinceName_default = Some-State
  20. localityName = Locality Name (eg, city)
  21. 0.organizationName = Organization Name (eg, company)
  22. 0.organizationName_default = Internet Widgits Pty Ltd
  23. organizationalUnitName = Organizational Unit Name (eg, section)
  24. commonName = Common Name (eg, YOUR name)
  25. commonName_max = 64
  26. emailAddress = Email Address
  27. emailAddress_max = 64
  28. [ req_attributes ]
  29. challengePassword = A challenge password
  30. challengePassword_min = 4
  31. challengePassword_max = 20
  32. unstructuredName = An optional company name
  33. [ v3_req ]
  34. basicConstraints = CA:FALSE
  35. keyUsage = nonRepudiation, digitalSignature, keyEncipherment
  36. [ v3_ca ]
  37. subjectKeyIdentifier=hash
  38. authorityKeyIdentifier=keyid:always,issuer:always
  39. basicConstraints = CA:true
  40. [ usr_cert ]
  41. basicConstraints=CA:FALSE