os/security/cryptoservices/certificateandkeymgmt/tder/example/root5ca/openssl.config
author sl
Tue, 10 Jun 2014 14:32:02 +0200
changeset 1 260cb5ec6c19
permissions -rw-r--r--
Update contrib.
     1 [Root5CA]
     2 
     3 database        = index.txt				# index file.
     4 new_certs_dir   = .						# new certs dir
     5  
     6 certificate     = ../root5ca.pem		# The CA cert
     7 serial          = serial				# serial no file
     8 private_key     = ../root5ca_key.pem		# CA private key
     9 RANDFILE        = rand  	  			# random number file
    10  
    11 default_days    = 365							# how long to certify for
    12 default_crl_days= 30					# how long before next CRL
    13 default_md      = md5					# md to use
    14 
    15 policy          = policy_any			# default policy
    16 email_in_dn     = no					# Don't add the email into cert DN
    17 
    18 name_opt        = ca_default			# Subject name display option
    19 cert_opt        = ca_default			# Certificate display option
    20 copy_extensions = none					# Don't copy extensions from request
    21 
    22 [policy_any]
    23 countryName            = supplied
    24 stateOrProvinceName    = optional
    25 organizationName       = optional
    26 organizationalUnitName = optional
    27 commonName             = supplied
    28 emailAddress           = optional
    29 
    30 [ca_policy]
    31 organizationName       = supplied
    32 commonName             = supplied
    33 
    34 [Signing_Extensions] 
    35 extendedKeyUsage=codeSigning