34 lines
806 B
Smarty
34 lines
806 B
Smarty
|
[req]
|
||
|
|
default_bits = 4096
|
||
|
|
distinguished_name = req_distinguished_name
|
||
|
|
req_extensions = v3_req
|
||
|
|
prompt = no
|
||
|
|
|
||
|
|
[req_distinguished_name]
|
||
|
|
|
||
|
|
[v3_req]
|
||
|
|
basicConstraints = CA:FALSE
|
||
|
|
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
|
||
|
|
extendedKeyUsage = serverAuth, clientAuth
|
||
|
|
subjectAltName = @alt_names
|
||
|
|
|
||
|
|
[ ssl_client ]
|
||
|
|
basicConstraints = CA:FALSE
|
||
|
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||
|
|
extendedKeyUsage = clientAuth, serverAuth
|
||
|
|
authorityKeyIdentifier=keyid,issuer
|
||
|
|
subjectAltName = @alt_names
|
||
|
|
|
||
|
|
[ ssl_peer ]
|
||
|
|
basicConstraints = CA:FALSE
|
||
|
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||
|
|
extendedKeyUsage = clientAuth, serverAuth
|
||
|
|
authorityKeyIdentifier=keyid,issuer
|
||
|
|
subjectAltName = @alt_names
|
||
|
|
|
||
|
|
[ v3_ca ]
|
||
|
|
basicConstraints = CA:TRUE
|
||
|
|
keyUsage = keyCertSign,cRLSign
|
||
|
|
|
||
|
|
[alt_names]
|