Subversion Repositories configs

Rev

Rev 4 | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
4 - 1 
[ ca ]
2 
default_ca		= CA_default
3 
 
4 
[ CA_default ]
5 
dir			= ./
6 
certs			= $dir
7 
crl_dir			= $dir/crl
8 
database		= $dir/index.txt
9 
new_certs_dir		= $dir
10 
certificate		= $dir/ca.pem
11 
serial			= $dir/serial
12 
crl			= $dir/crl.pem
13 
private_key		= $dir/ca.key
14 
RANDFILE		= $dir/.rand
15 
name_opt		= ca_default
16 
cert_opt		= ca_default
17 
default_days		= 60
18 
default_crl_days	= 30
34 - 19 
default_md		= sha256
4 - 20 
preserve		= no
21 
policy			= policy_match
34 - 22 
crlDistributionPoints	= URI:http://www.example.com/example_ca.crl
4 - 23 
 
24 
[ policy_match ]
25 
countryName		= match
26 
stateOrProvinceName	= match
27 
organizationName	= match
28 
organizationalUnitName	= optional
29 
commonName		= supplied
30 
emailAddress		= optional
31 
 
32 
[ policy_anything ]
33 
countryName		= optional
34 
stateOrProvinceName	= optional
35 
localityName		= optional
36 
organizationName	= optional
37 
organizationalUnitName	= optional
38 
commonName		= supplied
39 
emailAddress		= optional
40 
 
41 
[ req ]
42 
prompt			= no
43 
distinguished_name	= certificate_authority
44 
default_bits		= 2048
45 
input_password		= whatever
46 
output_password		= whatever
47 
x509_extensions		= v3_ca
48 
 
49 
[certificate_authority]
50 
countryName		= FR
51 
stateOrProvinceName	= Radius
52 
localityName		= Somewhere
53 
organizationName	= Example Inc.
54 
emailAddress		= admin@example.com
55 
commonName		= "Example Certificate Authority"
56 
 
57 
[v3_ca]
58 
subjectKeyIdentifier	= hash
59 
authorityKeyIdentifier	= keyid:always,issuer:always
60 
basicConstraints	= CA:true
34 - 61 
crlDistributionPoints	= URI:http://www.example.com/example_ca.crl
62