openssl.cnf 1.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. oid_section = new_oids
  2. [ new_oids ]
  3. # Example policies to test their
  4. tsa_policy1 = 1.2.3.4.1
  5. tsa_policy2 = 1.2.3.4.5.6
  6. [ req ]
  7. default_bits = 1024
  8. default_md = sha256
  9. default_keyfile = privkey.pem
  10. distinguished_name = req_distinguished_name
  11. attributes = req_attributes
  12. x509_extensions = v3_ca # The extensions to add to the self signed cert
  13. string_mask = MASK:4294967295
  14. [ req_distinguished_name ]
  15. countryName = Country Name (2 letter code)
  16. countryName_default = AU
  17. countryName_min = 2
  18. countryName_max = 2
  19. stateOrProvinceName = State or Province Name (full name)
  20. stateOrProvinceName_default = Some-State
  21. localityName = Locality Name (eg, city)
  22. 0.organizationName = Organization Name (eg, company)
  23. 0.organizationName_default = Internet Widgits Pty Ltd
  24. organizationalUnitName = Organizational Unit Name (eg, section)
  25. commonName = Common Name (eg, YOUR name)
  26. commonName_max = 64
  27. emailAddress = Email Address
  28. emailAddress_max = 64
  29. [ req_attributes ]
  30. challengePassword = A challenge password
  31. challengePassword_min = 4
  32. challengePassword_max = 20
  33. unstructuredName = An optional company name
  34. [ v3_req ]
  35. basicConstraints = CA:FALSE
  36. keyUsage = nonRepudiation, digitalSignature, keyEncipherment
  37. [ v3_ca ]
  38. subjectKeyIdentifier=hash
  39. authorityKeyIdentifier=keyid:always,issuer:always
  40. basicConstraints = CA:true
  41. [ usr_cert ]
  42. basicConstraints=CA:FALSE