@@ -37,130 +37,6 @@ Both of these configuration files should be placed in the current working direct
37
37
### Example openssl.cnf
38
38
39
39
``` ini
40
- #
41
- # OpenSSL example configuration file.
42
- # This is mostly being used for generation of certificate requests.
43
- #
44
-
45
- # This definition stops the following lines choking if HOME isn't
46
- # defined.
47
- HOME = .
48
- RANDFILE = $ENV::HOME/.rnd
49
-
50
- # Extra OBJECT IDENTIFIER info:
51
- # oid_file = $ENV::HOME/.oid
52
- oid_section = new_oids
53
-
54
- # To use this configuration file with the "-extfile" option of the
55
- # "openssl x509" utility, name here the section containing the
56
- # X.509v3 extensions to use:
57
- # extensions =
58
- # (Alternatively, use a configuration file that has only
59
- # X.509v3 extensions in its main [= default] section.)
60
-
61
- [ new_oids ]
62
-
63
- # We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
64
- # Add a simple OID like this:
65
- # testoid1=1.2.3.4
66
- # Or use config file substitution like this:
67
- # testoid2=${testoid1}.5.6
68
-
69
- # Policies used by the TSA examples.
70
- tsa_policy1 = 1.2.3.4.1
71
- tsa_policy2 = 1.2.3.4.5.6
72
- tsa_policy3 = 1.2.3.4.5.7
73
-
74
- # ###################################################################
75
- [ ca ]
76
- default_ca = CA_default # The default ca section
77
-
78
- [ CA_default ]
79
- dir = /home/gridappsd/tls # Where everything is kept
80
- certs = $dir/certs # Where the issued certs are kept
81
- database = $dir/index.txt # database index file.
82
- # several certs with same subject.
83
- new_certs_dir = $dir/certs # default place for new certs.
84
- certificate = $dir/certs/ec-cacert.pem # The CA certificate
85
- serial = $dir/serial # The current serial number
86
- crlnumber = $dir/crlnumber # the current crl number
87
- # must be commented out to leave a V1 CRL
88
- private_key = $dir/private/ec-cakey.pem # The private key
89
-
90
- name_opt = ca_default # Subject Name options
91
- cert_opt = ca_default # Certificate field options
92
-
93
- default_days = 365 # how long to certify for
94
- default_crl_days = 30 # how long before next CRL
95
- default_md = sha256 # use SHA-256 by default
96
- preserve = no # keep passed DN ordering
97
- policy = policy_match
98
-
99
- # For the CA policy
100
- [ policy_match ]
101
- countryName = optional
102
- stateOrProvinceName = optional
103
- organizationName = optional
104
- organizationalUnitName = optional
105
- commonName = optional
106
- emailAddress = optional
107
-
108
- [ policy_anything ]
109
- countryName = optional
110
- stateOrProvinceName = optional
111
- localityName = optional
112
- organizationName = optional
113
- organizationalUnitName = optional
114
- commonName = optional
115
- emailAddress = optional
116
-
117
- # ###################################################################
118
- [ req ]
119
- default_bits = 2048
120
- default_md = sha256
121
- default_keyfile = privkey.pem
122
- # distinguished_name = req_distinguished_name
123
- # attributes = req_attributes
124
- x509_extensions = v3_ca # The extentions to add to the self signed cert
125
-
126
- [ req_distinguished_name ]
127
- # countryName = Country Name (2 letter code)
128
- # countryName_default = US
129
- # countryName_min = 2
130
- # countryName_max = 2
131
- # stateOrProvinceName = State or Province Name (full name)
132
- # stateOrProvinceName_default = Washington
133
- # localityName = Locality Name (eg, city)
134
- # localityName_default = Richland
135
- # 0.organizationName = Organization Name (eg, company)
136
- # 0.organizationName_default =
137
- # organizationalUnitName = Organizational Unit Name (eg, section)
138
- # commonName = Common Name (eg, your name or your server\'s hostname)
139
- # commonName_max = 64
140
- # emailAddress = Email Address
141
- # emailAddress_max = 64
142
-
143
- [ req_attributes ]
144
- challengePassword = A challenge password
145
- challengePassword_min = 4
146
- challengePassword_max = 20
147
- unstructuredName = An optional company name
148
-
149
-
150
- [ v3_req ]
151
- # Extensions to add to a certificate request
152
- basicConstraints = CA:FALSE
153
- keyUsage = nonRepudiation, digitalSignature, keyEncipherment
154
-
155
- [ v3_ca ]
156
- # Extensions for a typical CA
157
- subjectKeyIdentifier =hash
158
- authorityKeyIdentifier =keyid:always,issuer
159
- basicConstraints = critical,CA:true
160
-
161
- [ crl_ext ]
162
- # issuerAltName=issuer:copy
163
- authorityKeyIdentifier =keyid:always#
164
40
# OpenSSL example configuration file.
165
41
# This is mostly being used for generation of certificate requests.
166
42
#
@@ -199,7 +75,7 @@ tsa_policy3 = 1.2.3.4.5.7
199
75
default_ca = CA_default # The default ca section
200
76
201
77
[ CA_default ]
202
- dir = /home/gridappsd/ tls # Where everything is kept
78
+ dir = $ENV::HOME/ tls # Where everything is kept
203
79
certs = $dir/certs # Where the issued certs are kept
204
80
database = $dir/index.txt # database index file.
205
81
# several certs with same subject.
0 commit comments