1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/os/ossrv/ssl/tsrc/BC/libcrypto/topenssl/data/CAss.cnf	Fri Jun 15 03:10:57 2012 +0200
     1.3 @@ -0,0 +1,76 @@
     1.4 +#
     1.5 +# SSLeay example configuration file.
     1.6 +# This is mostly being used for generation of certificate requests.
     1.7 +#
     1.8 +
     1.9 +RANDFILE		= ./.rnd
    1.10 +
    1.11 +####################################################################
    1.12 +[ req ]
    1.13 +default_bits		= 512
    1.14 +default_keyfile 	= keySS.pem
    1.15 +distinguished_name	= req_distinguished_name
    1.16 +encrypt_rsa_key		= no
    1.17 +default_md		= sha1
    1.18 +
    1.19 +[ req_distinguished_name ]
    1.20 +countryName			= Country Name (2 letter code)
    1.21 +countryName_default		= AU
    1.22 +countryName_value		= AU
    1.23 +
    1.24 +organizationName		= Organization Name (eg, company)
    1.25 +organizationName_value		= Dodgy Brothers
    1.26 +
    1.27 +commonName			= Common Name (eg, YOUR name)
    1.28 +commonName_value		= Dodgy CA
    1.29 +
    1.30 +####################################################################
    1.31 +[ ca ]
    1.32 +default_ca	= CA_default		# The default ca section
    1.33 +
    1.34 +####################################################################
    1.35 +[ CA_default ]
    1.36 +
    1.37 +dir		= ./demoCA		# Where everything is kept
    1.38 +certs		= $dir/certs		# Where the issued certs are kept
    1.39 +crl_dir		= $dir/crl		# Where the issued crl are kept
    1.40 +database	= $dir/index.txt	# database index file.
    1.41 +#unique_subject	= no			# Set to 'no' to allow creation of
    1.42 +					# several ctificates with same subject.
    1.43 +new_certs_dir	= $dir/newcerts		# default place for new certs.
    1.44 +
    1.45 +certificate	= $dir/cacert.pem 	# The CA certificate
    1.46 +serial		= $dir/serial 		# The current serial number
    1.47 +crl		= $dir/crl.pem 		# The current CRL
    1.48 +private_key	= $dir/private/cakey.pem# The private key
    1.49 +RANDFILE	= $dir/private/.rand	# private random number file
    1.50 +
    1.51 +x509_extensions	= v3_ca			# The extentions to add to the cert
    1.52 +
    1.53 +name_opt 	= ca_default		# Subject Name options
    1.54 +cert_opt 	= ca_default		# Certificate field options
    1.55 +
    1.56 +default_days	= 365			# how long to certify for
    1.57 +default_crl_days= 30			# how long before next CRL
    1.58 +default_md	= md5			# which md to use.
    1.59 +preserve	= no			# keep passed DN ordering
    1.60 +
    1.61 +policy		= policy_anything
    1.62 +
    1.63 +[ policy_anything ]
    1.64 +countryName		= optional
    1.65 +stateOrProvinceName	= optional
    1.66 +localityName		= optional
    1.67 +organizationName	= optional
    1.68 +organizationalUnitName	= optional
    1.69 +commonName		= supplied
    1.70 +emailAddress		= optional
    1.71 +
    1.72 +
    1.73 +
    1.74 +[ v3_ca ]
    1.75 +subjectKeyIdentifier=hash
    1.76 +authorityKeyIdentifier=keyid:always,issuer:always
    1.77 +basicConstraints = CA:true,pathlen:1
    1.78 +keyUsage = cRLSign, keyCertSign
    1.79 +issuerAltName=issuer:copy