2017-04-22 03:34:16 +08:00
|
|
|
[ ca ]
|
|
|
|
default_ca = myca
|
|
|
|
|
|
|
|
[ crl_ext ]
|
2017-04-22 03:34:16 +08:00
|
|
|
issuerAltName=issuer:copy
|
2017-04-22 03:34:16 +08:00
|
|
|
authorityKeyIdentifier=keyid:always
|
|
|
|
|
|
|
|
[ myca ]
|
|
|
|
dir = ./certs/
|
|
|
|
new_certs_dir = $dir
|
|
|
|
unique_subject = no
|
2017-04-22 03:34:16 +08:00
|
|
|
certificate = $dir/interca.crt
|
2017-04-22 03:34:16 +08:00
|
|
|
database = $dir/certindex
|
|
|
|
private_key = $dir/interca.key
|
|
|
|
serial = $dir/certserial
|
|
|
|
default_days = 730
|
|
|
|
default_md = sha1
|
|
|
|
policy = myca_policy
|
|
|
|
x509_extensions = myca_extensions
|
|
|
|
crlnumber = $dir/crlnumber
|
|
|
|
default_crl_days = 730
|
|
|
|
|
|
|
|
[ myca_policy ]
|
|
|
|
commonName = supplied
|
|
|
|
stateOrProvinceName = supplied
|
|
|
|
countryName = optional
|
|
|
|
emailAddress = optional
|
|
|
|
organizationName = supplied
|
|
|
|
organizationalUnitName = optional
|
|
|
|
|
|
|
|
[ myca_extensions ]
|
|
|
|
basicConstraints = critical,CA:TRUE
|
|
|
|
keyUsage = critical,any
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
authorityKeyIdentifier = keyid:always,issuer
|
|
|
|
keyUsage = digitalSignature,keyEncipherment
|
|
|
|
extendedKeyUsage = serverAuth
|
|
|
|
crlDistributionPoints = @crl_section
|
|
|
|
subjectAltName = @alt_names
|
|
|
|
authorityInfoAccess = @ocsp_section
|
|
|
|
|
|
|
|
[ v3_ca ]
|
|
|
|
basicConstraints = critical,CA:TRUE,pathlen:0
|
|
|
|
keyUsage = critical,any
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
authorityKeyIdentifier = keyid:always,issuer
|
|
|
|
keyUsage = digitalSignature,keyEncipherment
|
|
|
|
extendedKeyUsage = serverAuth
|
|
|
|
crlDistributionPoints = @crl_section
|
|
|
|
subjectAltName = @alt_names
|
|
|
|
authorityInfoAccess = @ocsp_section
|
|
|
|
|
|
|
|
[alt_names]
|
2017-04-22 03:34:16 +08:00
|
|
|
DNS.0 = WgetTestingServer
|
2017-04-22 03:34:16 +08:00
|
|
|
|
|
|
|
[crl_section]
|
|
|
|
URI.0 = http://intertest.wgettest.org/Bogus.crl
|
|
|
|
URI.1 = http://intertest.wgettest.org/Bogus.crl
|
|
|
|
|
|
|
|
[ocsp_section]
|
|
|
|
caIssuers;URI.0 = http://intertest.wgettest.com/Bogus.crt
|
|
|
|
caIssuers;URI.1 = http://intertest.wgettest.com/Bogus.crt
|
|
|
|
OCSP;URI.0 = http://intertest.wgettest.com/ocsp/
|
|
|
|
OCSP;URI.1 = http://intertest.wgettest.com/ocsp/
|