aboutsummaryrefslogtreecommitdiff
path: root/x509util/testdata/ca.conf
blob: 7889331e8d298fbfa236f74e4eec7385c11a2c5d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
[ca]
default_ca = ca_settings

[ ca_settings ]
dir = .
certs             = $dir
crl_dir           = $dir
new_certs_dir     = $dir
database          = $dir/index
serial            = $dir/serial

private_key       = $dir/root.key
certificate       = $dir/root.pem

policy = ca_policy

[ ca_policy ]
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = supplied
emailAddress            = optional

# Options for the `req` tool, `man req`
[ req ]
distinguished_name  = req_distinguished_name

# Extensions for a typical CA, see `man x509v3_config`
[ v3_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:true
keyUsage = critical, digitalSignature, keyCertSign

# Extensions for a typical intermediate CA, see `man x509v3_config`
[ v3_intermediate_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:true, pathlen:0
keyUsage = critical, digitalSignature, keyCertSign

[ req_distinguished_name ]
countryName            = Country Name (2 letter code)
stateOrProvinceName    = State or Province Name
localityName           = Locality Name
0.organizationName     = Organization Name
organizationalUnitName = Organizational Unit Name
commonName             = Common Name
emailAddress           = Email Address

countryName_default            = NA
stateOrProvinceName_default    = NA
localityName_default           = NA
0.organizationName_default     = NA
organizationalUnitName_default = NA
emailAddress_default           = NA
commonName_default             = stfe testdata