From e981fdc495a7212ab2e80c851a4801634682e1f0 Mon Sep 17 00:00:00 2001
From: Polaire <polaire@yh.genj.fr>
Date: Thu, 13 Mar 2025 11:01:47 +0100
Subject: [PATCH] Ajouter ca-intermediaire/openssl.cnf

---
 ca-intermediaire/openssl.cnf | 77 ++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 ca-intermediaire/openssl.cnf

diff --git a/ca-intermediaire/openssl.cnf b/ca-intermediaire/openssl.cnf
new file mode 100644
index 0000000..6b4e119
--- /dev/null
+++ b/ca-intermediaire/openssl.cnf
@@ -0,0 +1,77 @@
+[ ca ]  
+default_ca = CA_default  
+ 
+[ CA_default ]  
+dir = /root/ca-intermediaire  
+certs = $dir/certs  
+crl_dir = $dir/crl  
+database = $dir/index.txt 
+new_certs_dir = $dir/newcerts 
+certificate = $dir/racine.cert 
+serial = $dir/serial 
+crlnumber = $dir/crlnumber 
+crl = $dir/crl.cert 
+private_key = $dir/private/racine.key  
+RANDFILE = $dir/private/.rand 
+ 
+default_days = 365 
+default_crl_days = 30  
+default_md = sha512 
+preserve = no 
+policy = policy_loose 
+ 
+[ policy_loose ] 
+countryName = match  
+stateOrProvinceName = supplied 
+localityName = supplied  
+organizationName = supplied  
+organizationalUnitName = optional 
+commonName = supplied  
+emailAddress = optional  
+
+[ req ]  
+default_bits = 4096 
+default_md = sha512  
+default_keyfile = privkey.pem 
+distinguished_name = req_nom_distinct 
+x509_extensions = v3_ca_intermediaire 
+ 
+[ req_nom_distinct ]  
+countryName = Country Name (2 letter code) 
+countryName_default = FR  
+stateOrProvinceName = State or Province Name (full name)  
+stateOrProvinceName_default = Paca  
+localityName = Locality Name (eg, city)  
+localityName_default = Marseille  
+0.organizationName = Organization Name (eg, company)  
+0.organizationName_default = Igensia  
+organizationalUnitName = Organizational Unit Name (eg, section)  
+organizationalUnitName_default = ISCPA  
+commonName = Common Name (eg, your name)  
+commonName_max = 64  
+emailAddress = Email Address  
+emailAddress_max = 64  
+ 
+[ v3_ca_intermediaire ]  
+subjectKeyIdentifier = hash  
+authorityKeyIdentifier = keyid:always,issuer  
+basicConstraints = critical,CA:true,pathlen:0  
+keyUsage = critical, cRLSign, keyCertSign  
+ 
+[ server_cert ] 
+basicConstraints = CA:FALSE 
+nsCertType = server 
+subjectKeyIdentifier = hash 
+authorityKeyIdentifier = keyid,issuer:always 
+keyUsage = critical, digitalSignature, keyEncipherment  
+extendedKeyUsage = serverAuth 
+subjectAltName = @alt_names  
+
+[ alt_names ]  
+DNS.1 = maquette.igensia 
+
+[ crl_ext ]  
+authorityKeyIdentifier=keyid:always 
+
+
+