# $Id: cert.cfg,v 1.1.1.1 2012/02/21 23:25:53 misho Exp $

[ req ]
default_bits                    = 1024
distinguished_name              = req_DN

[ req_DN ]
countryName                     = ""
countryName_default             = US
countryName_min                 = 2
countryName_max                 = 2
stateOrProvinceName             = ""
stateOrProvinceName_default     = HappyLand
0.organizationName              = ""
0.organizationName_default      = The PDEL Library
commonName                      = ""
commonName_max                  = 128
commonName_default              = "Invalid"
emailAddress                    = ""
emailAddress_max                = 40
emailAddress_default            = pdel@library.local

[ ca ]
default_ca			= CA_own

[ CA_own ]
certs				= ca
new_certs_dir			= $certs/certs
database			= $certs/index
serial				= $certs/serial
RANDFILE			= $certs/rand
certificate			= $certs/ca.crt
private_key			= $certs/ca.key
default_days			= 1825
default_crl_days		= 30
default_md			= md5
preserve			= no
policy				= policy_anything

[ policy_anything ]
countryName			= optional
stateOrProvinceName		= optional
localityName			= optional
organizationName		= optional
organizationalUnitName		= optional
commonName			= supplied
emailAddress			= optional

[ x509v3 ]
subjectAltName			= email:copy
nsComment			= "This is a bogus certificate for the PDEL library HTTPS server demo."
nsCertType			= server