dev_ca.cnf 754 B

12345678910111213141516171819202122232425262728293031323334
  1. [ ca ]
  2. default_ca = devca
  3. [ crl_ext ]
  4. authorityKeyIdentifier=keyid:always
  5. [ devca ]
  6. new_certs_dir = /tmp
  7. unique_subject = no
  8. certificate = /tmp/root.cer
  9. database = /tmp/certindex
  10. private_key = /tmp/root.key
  11. serial = /tmp/serialfile
  12. default_days = 1
  13. default_md = sha1
  14. policy = devca_policy
  15. x509_extensions = devca_extensions
  16. [ devca_policy ]
  17. commonName = supplied
  18. stateOrProvinceName = supplied
  19. countryName = supplied
  20. emailAddress = optional
  21. organizationName = supplied
  22. organizationalUnitName = optional
  23. [ devca_extensions ]
  24. basicConstraints = CA:false
  25. subjectKeyIdentifier = hash
  26. authorityKeyIdentifier = keyid:always
  27. keyUsage = digitalSignature,keyEncipherment
  28. extendedKeyUsage = codeSigning
  29. crlDistributionPoints = URI:http://path.to.crl/devca.crl