1
0
Files
IRSS010-Public_Keys_Infrast…/ca/openssl.conf
T
2025-03-14 00:54:36 +01:00

68 lines
1.8 KiB
Plaintext

[ ca ]
default_ca = CA_default
[ CA_default ]
dir = /root/ca
certs = $dir/certs
crl_dir = $dir/crl
database = $dir/index.txt
new_certs_dir = $dir/newcerts
certificate = $dir/certs/racine.cert
serial = $dir/serial
crlnumber = $dir/crlnumber
crl = $dir/crl.cert
private_key = $dir/private/racine.key
RANDFILE = $dir/private/.rand
default_days = 365
default_crl_days = 30
default_md = sha512
preserve = no
policy = policy_loose
[ policy_loose ]
countryName = match
stateOrProvinceName = supplied
localityName = supplied
organizationName = supplied
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ req ]
default_bits = 4096
default_md = sha512
default_keyfile = privkey.pem
distinguished_name = req_nom_distinct
x509_extensions = v3_ca
[ req_nom_distinct ]
countryName = Country Name (2 letter code)
countryName_default = FR
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Haute-Garone
localityName = Locality Name (eg, city)
localityName_default = Toulouse
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Igensia
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = IPI
commonName = Common Name (eg, your name)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 64
[ v3_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical,CA:true
keyUsage = critical, cRLSign, keyCertSign
[ v3_ca_intermediaire ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical,CA:true,pathlen:0
keyUsage = critical, cRLSign, keyCertSign
[ crl_ext ]
authorityKeyIdentifier=keyid:always