29 lines
702 B
INI
29 lines
702 B
INI
|
# OpenSSL configuration file.
|
||
|
|
||
|
[ req ]
|
||
|
# Options for the `req` tool (`man req`).
|
||
|
default_bits = 2048
|
||
|
distinguished_name = req_distinguished_name
|
||
|
prompt = no
|
||
|
# SHA-1 is deprecated, so use SHA-2 instead.
|
||
|
default_md = sha256
|
||
|
# Extension to add when the -x509 option is used.
|
||
|
x509_extensions = v3_ca
|
||
|
# Try to force use of PrintableString throughout
|
||
|
string_mask = pkix
|
||
|
|
||
|
[ req_distinguished_name ]
|
||
|
C=GB
|
||
|
ST=London
|
||
|
L=London
|
||
|
O=Google
|
||
|
OU=Eng
|
||
|
CN=TestGossiperRoot
|
||
|
|
||
|
[ v3_ca ]
|
||
|
subjectKeyIdentifier = hash
|
||
|
authorityKeyIdentifier = keyid:always,issuer
|
||
|
basicConstraints = critical, CA:true, pathlen:3
|
||
|
keyUsage = critical, keyCertSign
|
||
|
extendedKeyUsage = 1.3.6.1.4.1.11129.2.4.6
|