add Sub CA request configuration

subcareq.conf

@@ -0,0 +1,46 @@
+# Request configuration for Sub CA certificate
+#
+# Author: Jan Dittberner <jan@dittberner.info>
+# Date:   2011-05-04
+
+RANDFILE                        = $ENV::HOME/ca/.rnd
+
+[ req ]
+default_bits                    = 2048
+distinguished_name              = req_distinguished_name
+x509_extensions                 = v3_subca_ext
+
+# This sets a mask for permitted string types. There are several options. 
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+string_mask                     = nombstr
+
+[ req_distinguished_name ]
+countryName                     = Country Name (2 letter code)
+countryName_default             = DE
+countryName_min                 = 2
+countryName_max                 = 2
+
+stateOrProvinceName             = State or Province Name (full name)
+stateOrProvinceName_default     = Saxony
+
+localityName                    = Locality Name (eg, city)
+localityName_default            = Example Town
+
+0.organizationName              = Organization Name (eg, company)
+0.organizationName_default      = Example Organization
+
+organizationalUnitName          = Organizational Unit Name (eg, section)
+organizationalUnitName_default  = Example Lab
+
+commonName                      = Common Name (eg, YOUR name)
+commonName_max                  = 64
+commonName_default              = Example Lab Sub CA
+
+emailAddress                    = Email Address
+emailAddress_max                = 64
+emailAddress_default            = subca@example.org
+
+[ v3_subca_ext ]
+basicConstraints                = critical, CA:true, pathlen:0
+keyUsage                        = critical, keyCertSign,cRLSign
+nsComment                       = "Example Labs Sub CA Certificate"