sl@0: # openssl.cfg
sl@0: #
sl@0: # Config file for OpenSSL CA
sl@0: 
sl@0: [ ca ]
sl@0: 
sl@0: default_ca      = ca_default            # The default ca section
sl@0: 
sl@0: [ ca1 ]
sl@0: 
sl@0: dir            = .\ca1
sl@0: database       = $dir\index.txt         # index file.
sl@0: new_certs_dir  = $dir\certs             # new certs dir
sl@0: 
sl@0: certificate    = $dir\cacert.pem        # The CA cert
sl@0: serial         = $dir\serial            # serial no file
sl@0: private_key    = $dir\private\cakey.pem # CA private key
sl@0: RANDFILE       = $dir\private\.rand     # random number file
sl@0: 
sl@0: default_days   = 3650                   # how long to certify for
sl@0: default_crl_days= 30                    # how long before next CRL
sl@0: default_md     = md5                    # md to use
sl@0: 
sl@0: policy         = ca_policy              # our policy
sl@0: email_in_dn    = no                     # Don't add the email into cert DN
sl@0: 
sl@0: nameopt        = default_ca             # Subject name display option
sl@0: certopt        = default_ca             # Certificate display option
sl@0: copy_extensions = none                  # Don't copy extensions from request
sl@0: 
sl@0: [req]
sl@0: distinguished_name = dname
sl@0: 
sl@0: [ ca_policy ]
sl@0: 
sl@0: organizationName       = supplied
sl@0: commonName             = supplied
sl@0: 
sl@0: [ dname ]
sl@0: C=UK
sl@0: O=Symbian
sl@0: OU=Security - Test