sl@0
|
1 |
# openssl.cfg
|
sl@0
|
2 |
#
|
sl@0
|
3 |
# Config file for OpenSSL CA
|
sl@0
|
4 |
|
sl@0
|
5 |
[ ca ]
|
sl@0
|
6 |
|
sl@0
|
7 |
default_ca = ca_default # The default ca section
|
sl@0
|
8 |
|
sl@0
|
9 |
[ ca1 ]
|
sl@0
|
10 |
|
sl@0
|
11 |
dir = .\ca1
|
sl@0
|
12 |
database = $dir\index.txt # index file.
|
sl@0
|
13 |
new_certs_dir = $dir\certs # new certs dir
|
sl@0
|
14 |
|
sl@0
|
15 |
certificate = $dir\cacert.pem # The CA cert
|
sl@0
|
16 |
serial = $dir\serial # serial no file
|
sl@0
|
17 |
private_key = $dir\private\cakey.pem # CA private key
|
sl@0
|
18 |
RANDFILE = $dir\private\.rand # random number file
|
sl@0
|
19 |
|
sl@0
|
20 |
default_days = 3650 # how long to certify for
|
sl@0
|
21 |
default_crl_days= 30 # how long before next CRL
|
sl@0
|
22 |
default_md = md5 # md to use
|
sl@0
|
23 |
|
sl@0
|
24 |
policy = ca_policy # our policy
|
sl@0
|
25 |
email_in_dn = no # Don't add the email into cert DN
|
sl@0
|
26 |
|
sl@0
|
27 |
nameopt = default_ca # Subject name display option
|
sl@0
|
28 |
certopt = default_ca # Certificate display option
|
sl@0
|
29 |
copy_extensions = none # Don't copy extensions from request
|
sl@0
|
30 |
|
sl@0
|
31 |
[req]
|
sl@0
|
32 |
distinguished_name = dname
|
sl@0
|
33 |
|
sl@0
|
34 |
[ ca_policy ]
|
sl@0
|
35 |
|
sl@0
|
36 |
organizationName = supplied
|
sl@0
|
37 |
commonName = supplied
|
sl@0
|
38 |
|
sl@0
|
39 |
[ dname ]
|
sl@0
|
40 |
C=UK
|
sl@0
|
41 |
O=Symbian
|
sl@0
|
42 |
OU=Security - Test
|