27 lines
728 B
INI
27 lines
728 B
INI
[ req ]
|
|
default_bits = @CERT_WIDTH@
|
|
default_keyfile = @CERT_PRIVKEY@
|
|
default_md = sha256
|
|
distinguished_name = req_distinguished_name
|
|
req_extensions = v3_req
|
|
prompt = no
|
|
[ req_distinguished_name ]
|
|
C = @CERT_COUNTRY@
|
|
ST = @CERT_STATE@
|
|
L = @CERT_LOCALITY@
|
|
O = @CERT_ORG@
|
|
OU = @CERT_UNIT@
|
|
CN= @CERT_COMMON@
|
|
emailAddress = @CERT_EMAIL@
|
|
[v3_ca]
|
|
subjectKeyIdentifier=hash
|
|
authorityKeyIdentifier=keyid:always,issuer:always
|
|
basicConstraints = CA:true
|
|
[v3_req]
|
|
# Extensions to add to a certificate request
|
|
basicConstraints = CA:FALSE
|
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
|
|
|
[req_ext]
|
|
subjectAltName=email:@CERT_ALT_EMAIL_1@,email:@CERT_ALT_EMAIL_2@,IP:@CERT_ALT_IP_1@,DNS:@CERT_ALT_DNS@
|