97 lines
2.2 KiB
Plaintext
97 lines
2.2 KiB
Plaintext
[ca]
|
|
default_ca = neonca
|
|
|
|
[neonca]
|
|
dir = ./ca
|
|
database = $dir/index.txt
|
|
new_certs_dir = $dir
|
|
certificate = $dir/cert.pem
|
|
serial = $dir/serial
|
|
private_key = $dir/key.pem
|
|
policy = policy_any
|
|
default_md = md5
|
|
x509_extensions = issuedExt
|
|
|
|
[policy_any]
|
|
countryName = optional
|
|
stateOrProvinceName = optional
|
|
localityName = optional
|
|
organizationName = optional
|
|
organizationalUnitName = optional
|
|
commonName = optional
|
|
emailAddress = optional
|
|
|
|
[req]
|
|
distinguished_name = $ENV::REQDN
|
|
x509_extensions = caExt
|
|
string_mask = $ENV::STRMASK
|
|
|
|
[caExt]
|
|
basicConstraints = CA:true
|
|
|
|
[issuedExt]
|
|
basicConstraints = CA:false
|
|
|
|
# subjectAltName extension sections
|
|
[altExt1]
|
|
subjectAltName = DNS:localhost
|
|
|
|
# 2+3: AltNames with multiple entries to test the matching logic
|
|
[altExt2]
|
|
subjectAltName = DNS:nohost.example.com, DNS:localhost
|
|
|
|
[altExt3]
|
|
subjectAltName = DNS:localhost, DNS:nohost.example.com
|
|
|
|
# an AltName with no DNS entries; should use commonName instead for
|
|
# identity check
|
|
[altExt4]
|
|
subjectAltName = email:neon@webdav.org
|
|
|
|
# an AltName with IP address
|
|
[altExt5]
|
|
subjectAltName = IP:127.0.0.1
|
|
|
|
# an AltName with a bad IP address
|
|
[altExt6]
|
|
subjectAltName = IP:1.2.3.4
|
|
|
|
[reqDN]
|
|
countryName = Country Name
|
|
stateOrProvinceName = State or Province Name
|
|
localityName = Locality Name
|
|
organizationName = Organization Name
|
|
organizationalUnitName = Organizational Unit Name
|
|
commonName = Common Name (eg, your name or your server\'s hostname)
|
|
emailAddress = Email Address
|
|
|
|
# a DN which gives two commonName attributes.
|
|
[reqDN.doubleCN]
|
|
countryName = Country Name
|
|
stateOrProvinceName = State or Province Name
|
|
localityName = Locality Name
|
|
organizationName = Organization Name
|
|
organizationalUnitName = Organizational Unit Name
|
|
0.commonName = Common Name
|
|
1.commonName = Common Name
|
|
emailAddress = Email Address
|
|
|
|
[reqDN.twoOU]
|
|
countryName = Country Name
|
|
stateOrProvinceName = State or Province Name
|
|
localityName = Locality Name
|
|
organizationName = Organization Name
|
|
0.organizationalUnitName = Organizational Unit Name
|
|
1.organizationalUnitName = Organizational Unit Name
|
|
commonName = Common Name (eg, your name or your server\'s hostname)
|
|
emailAddress = Email Address
|
|
|
|
[reqDN.CNfirst]
|
|
commonName = Common Name
|
|
|
|
[reqDN.missingCN]
|
|
countryName = CountryName
|
|
|
|
[reqDN.justEmail]
|
|
emailAddress = CountryName
|