From dc2f801233d16fc25353fc313901599c0849a665 Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Wed, 4 May 2011 22:07:16 +0200 Subject: [PATCH] add Sub CA request configuration --- subcareq.conf | 46 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 subcareq.conf diff --git a/subcareq.conf b/subcareq.conf new file mode 100644 index 0000000..bb45ab7 --- /dev/null +++ b/subcareq.conf @@ -0,0 +1,46 @@ +# Request configuration for Sub CA certificate +# +# Author: Jan Dittberner +# Date: 2011-05-04 + +RANDFILE = $ENV::HOME/ca/.rnd + +[ req ] +default_bits = 2048 +distinguished_name = req_distinguished_name +x509_extensions = v3_subca_ext + +# This sets a mask for permitted string types. There are several options. +# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). +string_mask = nombstr + +[ req_distinguished_name ] +countryName = Country Name (2 letter code) +countryName_default = DE +countryName_min = 2 +countryName_max = 2 + +stateOrProvinceName = State or Province Name (full name) +stateOrProvinceName_default = Saxony + +localityName = Locality Name (eg, city) +localityName_default = Example Town + +0.organizationName = Organization Name (eg, company) +0.organizationName_default = Example Organization + +organizationalUnitName = Organizational Unit Name (eg, section) +organizationalUnitName_default = Example Lab + +commonName = Common Name (eg, YOUR name) +commonName_max = 64 +commonName_default = Example Lab Sub CA + +emailAddress = Email Address +emailAddress_max = 64 +emailAddress_default = subca@example.org + +[ v3_subca_ext ] +basicConstraints = critical, CA:true, pathlen:0 +keyUsage = critical, keyCertSign,cRLSign +nsComment = "Example Labs Sub CA Certificate"