Jan Dittberner
7953dca56f
- use SHA256 as default_md for all requests - use UTF-8 as mandated by RFC-2459 - bump default key size for CA certificate requests to 4096 bits - remove whitespace at end of line - update change dates
46 lines
1.6 KiB
Plaintext
46 lines
1.6 KiB
Plaintext
# Request configuration for Sub CA certificate
|
|
#
|
|
# Author: Jan Dittberner <jan@dittberner.info>
|
|
# Date: 2015-02-03
|
|
|
|
RANDFILE = $ENV::HOME/ca/.rnd
|
|
|
|
[ req ]
|
|
default_bits = 4096
|
|
distinguished_name = req_distinguished_name
|
|
req_extensions = v3_subca_ext
|
|
utf8 = yes
|
|
default_md = sha256
|
|
string_mask = utf8only
|
|
|
|
[ req_distinguished_name ]
|
|
countryName = Country Name (2 letter code)
|
|
countryName_default = DE
|
|
countryName_min = 2
|
|
countryName_max = 2
|
|
|
|
stateOrProvinceName = State or Province Name (full name)
|
|
stateOrProvinceName_default = Saxony
|
|
|
|
localityName = Locality Name (eg, city)
|
|
localityName_default = Example Town
|
|
|
|
0.organizationName = Organization Name (eg, company)
|
|
0.organizationName_default = Example Organization
|
|
|
|
organizationalUnitName = Organizational Unit Name (eg, section)
|
|
organizationalUnitName_default = Example Lab
|
|
|
|
commonName = Common Name (eg, YOUR name)
|
|
commonName_max = 64
|
|
commonName_default = Example Lab Sub CA
|
|
|
|
emailAddress = Email Address
|
|
emailAddress_max = 64
|
|
emailAddress_default = subca@example.org
|
|
|
|
[ v3_subca_ext ]
|
|
basicConstraints = critical, CA:true, pathlen:0
|
|
keyUsage = critical, keyCertSign,cRLSign
|
|
nsComment = "Example Labs Sub CA Certificate"
|