~poptart/hosaka-pki

ref: 8d6f421fbd4ea6b5ac74c4add9e8321b9c370982 hosaka-pki/openssl.cnf.tmpl -rw-r--r-- 2.8 KiB
8d6f421f — poptart Updated to begin adding the interactive functions 1 year, 7 months ago
                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
[ ca ]
default_ca = CA_default

[ CA_default ]
dir = {{SSLDIR}}
certs = $dir/certs
crl_dir = $dir/crl
new_certs_dir = $dir/new
database = $dir/index.txt
serial = $dir/serial
RANDFILE = $dir/private/rand
private_key = $dir/private/{{SSLFILE}}.key.pem
certificate = $dir/certs/{{SSLFILE}}.cert.pem
crlnumber         = $dir/crlnumber
crl               = $dir/crl/{{SSLFILE}}.crl.pem
crl_extensions    = crl_ext
default_crl_days  = 30
default_md        = {{MDALGORITHM}}
name_opt          = ca_default
cert_opt          = ca_default
default_days      = {{DAYSVALID}}
preserve          = no
policy            = policy_strict

[ policy_strict ]
countryName             = match
stateOrProvinceName     = match
organizationName        = match
organizationalUnitName  = optional
commonName              = supplied
emailAddress            = optional

[ policy_loose ]
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = supplied
emailAddress            = optional

[ req ]
distinguished_name  = req_distinguished_name
string_mask         = utf8only
default_md          = {{MDALGORITHM}}
x509_extensions     = v3_ca

[ req_distinguished_name ]
countryName                     = Country Name (2 letter code)
stateOrProvinceName             = State or Province Name
localityName                    = Locality Name
0.organizationName              = Organization Name
organizationalUnitName          = Organizational Unit Name
commonName                      = Common Name

countryName_default             = {{COUNTRYDEFAULT}}
stateOrProvinceName_default     = {{STATEDEFAULT}}
localityName_default            = {{LOCALITYDEFAULT}}
0.organizationName_default      = {{ORGNAMEDEFAULT}}
organizationalUnitName_default = {{ORGUNITDEFAULT}}

[ v3_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:true
keyUsage = critical, digitalSignature, cRLSign, keyCertSign

[ v3_intermediate_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:true, pathlen:0
keyUsage = critical, digitalSignature, cRLSign, keyCertSign

[ usr_cert ]
basicConstraints = CA:FALSE
nsCertType = client, email
nsComment = "{{USERCERTCOMMENT}}"
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = clientAuth, emailProtection

[ server_cert ]
basicConstraints = CA:FALSE
nsCertType = server
nsComment = "{{SRVCERTCOMMENT}}"
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
keyUsage = critical, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth

[ crl_ext ]
authorityKeyIdentifier=keyid:always