# $Id: cert.cfg,v 1.1.1.1 2012/02/21 23:25:53 misho Exp $
[ req ]
default_bits = 1024
distinguished_name = req_DN
[ req_DN ]
countryName = ""
countryName_default = US
countryName_min = 2
countryName_max = 2
stateOrProvinceName = ""
stateOrProvinceName_default = HappyLand
0.organizationName = ""
0.organizationName_default = The PDEL Library
commonName = ""
commonName_max = 128
commonName_default = "Invalid"
emailAddress = ""
emailAddress_max = 40
emailAddress_default = pdel@library.local
[ ca ]
default_ca = CA_own
[ CA_own ]
certs = ca
new_certs_dir = $certs/certs
database = $certs/index
serial = $certs/serial
RANDFILE = $certs/rand
certificate = $certs/ca.crt
private_key = $certs/ca.key
default_days = 1825
default_crl_days = 30
default_md = md5
preserve = no
policy = policy_anything
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
[ x509v3 ]
subjectAltName = email:copy
nsComment = "This is a bogus certificate for the PDEL library HTTPS server demo."
nsCertType = server
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>