From f9af52ad3c5c13b97d3f69ab5992437e4947055f Mon Sep 17 00:00:00 2001
From: Polaire <polaire@yh.genj.fr>
Date: Thu, 13 Mar 2025 10:54:25 +0100
Subject: [PATCH] Ajouter ca/openssl.conf

---
 ca/openssl.conf | 68 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 ca/openssl.conf

diff --git a/ca/openssl.conf b/ca/openssl.conf
new file mode 100644
index 0000000..e4ca45d
--- /dev/null
+++ b/ca/openssl.conf
@@ -0,0 +1,68 @@
+[ ca ]  
+default_ca = CA_default  
+ 
+[ CA_default ]  
+dir = /root/ca  
+certs = $dir/certs  
+crl_dir = $dir/crl  
+database = $dir/index.txt 
+new_certs_dir = $dir/newcerts 
+certificate = $dir/racine.cert 
+serial = $dir/serial 
+crlnumber = $dir/crlnumber 
+crl = $dir/crl.cert 
+private_key = $dir/private/racine.key  
+RANDFILE = $dir/private/.rand 
+ 
+default_days = 365 
+default_crl_days = 30  
+default_md = sha512 
+preserve = no 
+policy = policy_loose 
+ 
+[ policy_loose ] 
+countryName = match  
+stateOrProvinceName = supplied 
+localityName = supplied  
+organizationName = supplied  
+organizationalUnitName = optional 
+commonName = supplied  
+emailAddress = optional  
+
+[ req ]  
+default_bits = 4096 
+default_md = sha512  
+default_keyfile = privkey.pem 
+distinguished_name = req_nom_distinct 
+x509_extensions = v3_ca 
+ 
+[ req_nom_distinct ]  
+countryName = Country Name (2 letter code) 
+countryName_default = FR  
+stateOrProvinceName = State or Province Name (full name)  
+stateOrProvinceName_default = Haute-Garone  
+localityName = Locality Name (eg, city)  
+localityName_default = Toulouse  
+0.organizationName = Organization Name (eg, company)  
+0.organizationName_default = Igensia  
+organizationalUnitName = Organizational Unit Name (eg, section)  
+organizationalUnitName_default = IPI  
+commonName = Common Name (eg, your name)  
+commonName_max = 64  
+emailAddress = Email Address  
+emailAddress_max = 64  
+
+[ v3_ca ]  
+subjectKeyIdentifier = hash  
+authorityKeyIdentifier = keyid:always,issuer  
+basicConstraints = critical,CA:true  
+keyUsage = critical, cRLSign, keyCertSign  
+
+[ v3_ca_intermediaire ]  
+subjectKeyIdentifier = hash  
+authorityKeyIdentifier = keyid:always,issuer  
+basicConstraints = critical,CA:true,pathlen:0  
+keyUsage = critical, cRLSign, keyCertSign  
+ 
+[ crl_ext ]  
+authorityKeyIdentifier=keyid:always 
\ No newline at end of file