1 1.1 christos # 2 1.1 christos # SSLeay example configuration file. 3 1.1 christos # This is mostly being used for generation of certificate requests. 4 1.1 christos # 5 1.1 christos 6 1.1 christos RANDFILE = ./.rnd 7 1.1 christos 8 1.1 christos #################################################################### 9 1.1 christos [ ca ] 10 1.1 christos default_ca = CA_default # The default ca section 11 1.1 christos 12 1.1 christos #################################################################### 13 1.1 christos [ CA_default ] 14 1.1 christos 15 1.1 christos dir = ./demoCA # Where everything is kept 16 1.1 christos certs = $dir/certs # Where the issued certs are kept 17 1.1 christos crl_dir = $dir/crl # Where the issued crl are kept 18 1.1 christos database = $dir/index.txt # database index file. 19 1.1 christos new_certs_dir = $dir/new_certs # default place for new certs. 20 1.1 christos 21 1.1 christos certificate = $dir/CAcert.pem # The CA certificate 22 1.1 christos serial = $dir/serial # The current serial number 23 1.1 christos crl = $dir/crl.pem # The current CRL 24 1.1 christos private_key = $dir/private/CAkey.pem# The private key 25 1.1 christos RANDFILE = $dir/private/.rand # private random number file 26 1.1 christos 27 1.1 christos default_days = 365 # how long to certify for 28 1.1 christos default_crl_days= 30 # how long before next CRL 29 1.1 christos default_md = md5 # which md to use. 30 1.1 christos 31 1.1 christos # A few difference way of specifying how similar the request should look 32 1.1 christos # For type CA, the listed attributes must be the same, and the optional 33 1.1 christos # and supplied fields are just that :-) 34 1.1 christos policy = policy_match 35 1.1 christos 36 1.1 christos # For the CA policy 37 1.1 christos [ policy_match ] 38 1.1 christos countryName = match 39 1.1 christos stateOrProvinceName = match 40 1.1 christos organizationName = match 41 1.1 christos organizationalUnitName = optional 42 1.1 christos commonName = supplied 43 1.1 christos emailAddress = optional 44 1.1 christos 45 1.1 christos # For the 'anything' policy 46 1.1 christos # At this point in time, you must list all acceptable 'object' 47 1.1 christos # types. 48 1.1 christos [ policy_anything ] 49 1.1 christos countryName = optional 50 1.1 christos stateOrProvinceName = optional 51 1.1 christos localityName = optional 52 1.1 christos organizationName = optional 53 1.1 christos organizationalUnitName = optional 54 1.1 christos commonName = supplied 55 1.1 christos emailAddress = optional 56 1.1 christos 57 1.1 christos #################################################################### 58 1.1 christos [ req ] 59 1.1.1.2 christos default_bits = 2048 60 1.1 christos default_keyfile = testkey.pem 61 1.1 christos distinguished_name = req_distinguished_name 62 1.1 christos encrypt_rsa_key = no 63 1.1 christos 64 1.1 christos [ req_distinguished_name ] 65 1.1 christos countryName = Country Name (2 letter code) 66 1.1 christos countryName_default = AU 67 1.1 christos countryName_value = AU 68 1.1 christos 69 1.1 christos stateOrProvinceName = State or Province Name (full name) 70 1.1 christos stateOrProvinceName_default = Queensland 71 1.1 christos stateOrProvinceName_value = 72 1.1 christos 73 1.1 christos localityName = Locality Name (eg, city) 74 1.1 christos localityName_value = Brisbane 75 1.1 christos 76 1.1 christos organizationName = Organization Name (eg, company) 77 1.1 christos organizationName_default = 78 1.1 christos organizationName_value = CryptSoft Pty Ltd 79 1.1 christos 80 1.1 christos organizationalUnitName = Organizational Unit Name (eg, section) 81 1.1 christos organizationalUnitName_default = 82 1.1 christos organizationalUnitName_value = . 83 1.1 christos 84 1.1 christos commonName = Common Name (eg, YOUR name) 85 1.1 christos commonName_value = Eric Young 86 1.1 christos 87 1.1 christos emailAddress = Email Address 88 1.1 christos emailAddress_value = eay@mincom.oz.au 89