1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/os/security/cryptoservices/certificateandkeymgmt/tder/example/root5ca/openssl.config	Fri Jun 15 03:10:57 2012 +0200
     1.3 @@ -0,0 +1,35 @@
     1.4 +[Root5CA]
     1.5 +
     1.6 +database        = index.txt				# index file.
     1.7 +new_certs_dir   = .						# new certs dir
     1.8 + 
     1.9 +certificate     = ../root5ca.pem		# The CA cert
    1.10 +serial          = serial				# serial no file
    1.11 +private_key     = ../root5ca_key.pem		# CA private key
    1.12 +RANDFILE        = rand  	  			# random number file
    1.13 + 
    1.14 +default_days    = 365							# how long to certify for
    1.15 +default_crl_days= 30					# how long before next CRL
    1.16 +default_md      = md5					# md to use
    1.17 +
    1.18 +policy          = policy_any			# default policy
    1.19 +email_in_dn     = no					# Don't add the email into cert DN
    1.20 +
    1.21 +name_opt        = ca_default			# Subject name display option
    1.22 +cert_opt        = ca_default			# Certificate display option
    1.23 +copy_extensions = none					# Don't copy extensions from request
    1.24 +
    1.25 +[policy_any]
    1.26 +countryName            = supplied
    1.27 +stateOrProvinceName    = optional
    1.28 +organizationName       = optional
    1.29 +organizationalUnitName = optional
    1.30 +commonName             = supplied
    1.31 +emailAddress           = optional
    1.32 +
    1.33 +[ca_policy]
    1.34 +organizationName       = supplied
    1.35 +commonName             = supplied
    1.36 +
    1.37 +[Signing_Extensions] 
    1.38 +extendedKeyUsage=codeSigning