test.cnf revision 1.1.1.1 1
2 ####################################################################
3 [ ca ]
4 default_ca = CA_default # The default ca section
5
6 ####################################################################
7 [ CA_default ]
8
9 dir = ./demoCA # Where everything is kept
10 certs = $dir/certs # Where the issued certs are kept
11 crl_dir = $dir/crl # Where the issued crl are kept
12 database = $dir/index.txt # database index file.
13 new_certs_dir = $dir/new_certs # default place for new certs.
14
15 certificate = $dir/CAcert.pem # The CA certificate
16 serial = $dir/serial # The current serial number
17 crl = $dir/crl.pem # The current CRL
18 private_key = $dir/private/CAkey.pem# The private key
19
20 default_days = 365 # how long to certify for
21 default_crl_days= 30 # how long before next CRL
22 default_md = md5 # which md to use.
23
24 # A few difference way of specifying how similar the request should look
25 # For type CA, the listed attributes must be the same, and the optional
26 # and supplied fields are just that :-)
27 policy = policy_match
28
29 # For the CA policy
30 [ policy_match ]
31 countryName = match
32 stateOrProvinceName = match
33 organizationName = match
34 organizationalUnitName = optional
35 commonName = supplied
36 emailAddress = optional
37
38 # For the 'anything' policy
39 # At this point in time, you must list all acceptable 'object'
40 # types.
41 [ policy_anything ]
42 countryName = optional
43 stateOrProvinceName = optional
44 localityName = optional
45 organizationName = optional
46 organizationalUnitName = optional
47 commonName = supplied
48 emailAddress = optional
49
50 ####################################################################
51 [ req ]
52 distinguished_name = req_distinguished_name
53
54 # Make altreq be identical to req
55 [ altreq ]
56 distinguished_name = req_distinguished_name
57 encrypt_rsa_key = no
58
59 [ req_distinguished_name ]
60 countryName = C field
61 countryName_value = AU
62 stateOrProvinceName = SP field
63 stateOrProvinceName_value =
64 localityName = L field
65 localityName_value = Brisbane
66 organizationName = O field
67 organizationName_value = CryptSoft Pty Ltd
68 organizationalUnitName = OU field
69 organizationalUnitName_value = .
70 commonName = CN field
71 commonName_value = Eric Young
72 emailAddress = email field
73 emailAddress_value = eay (a] mincom.oz.au
74
75 [ dirname_sec ]
76 C = UK
77 O = My Organization
78 OU = My Unit
79 CN = My Name
80
81 [ reqexts ]
82 keyUsage = critical,digitalSignature,keyEncipherment
83