add Sub CA request configuration

This commit is contained in:
Jan Dittberner 2011-05-04 22:07:16 +02:00
parent 5568b91acd
commit dc2f801233

46
subcareq.conf Normal file
View file

@ -0,0 +1,46 @@
# Request configuration for Sub CA certificate
#
# Author: Jan Dittberner <jan@dittberner.info>
# Date: 2011-05-04
RANDFILE = $ENV::HOME/ca/.rnd
[ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
x509_extensions = v3_subca_ext
# This sets a mask for permitted string types. There are several options.
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
string_mask = nombstr
[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = DE
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Saxony
localityName = Locality Name (eg, city)
localityName_default = Example Town
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Example Organization
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = Example Lab
commonName = Common Name (eg, YOUR name)
commonName_max = 64
commonName_default = Example Lab Sub CA
emailAddress = Email Address
emailAddress_max = 64
emailAddress_default = subca@example.org
[ v3_subca_ext ]
basicConstraints = critical, CA:true, pathlen:0
keyUsage = critical, keyCertSign,cRLSign
nsComment = "Example Labs Sub CA Certificate"