-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathca_config.conf
55 lines (43 loc) · 1.17 KB
/
ca_config.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
[ ca ]
default_ca = local_ca
[ local_ca ]
dir = ./certs/
certificate = $dir/cacert.pem
database = $dir/index.txt
new_certs_dir = $dir/signedcerts
private_key = $dir/private/cakey.pem
serial = $dir/serial
default_crl_days = 365
default_days = 1825
default_md = sha256
policy = local_ca_policy
x509_extensions = local_ca_extensions
copy_extensions = copy
# don't change
[ local_ca_policy ]
commonName = supplied
stateOrProvinceName = supplied
countryName = supplied
emailAddress = supplied
organizationName = supplied
organizationalUnitName = supplied
[ local_ca_extensions ]
basicConstraints = CA:false
[ req ]
default_bits = 2048
default_md = sha256
prompt = no
distinguished_name = root_ca_distinguished_name
x509_extensions = root_ca_extensions
# Change as you like
[ root_ca_distinguished_name ]
commonName = MiniKube Root Certificate Authority
stateOrProvinceName = Castle
countryName = DK
emailAddress = [email protected]
organizationName = Minikube Kubernetes Testing CA
organizationalUnitName = Guard
[ root_ca_extensions ]
keyUsage=critical,digitalSignature, keyEncipherment, keyCertSign
extendedKeyUsage=serverAuth, clientAuth
basicConstraints =critical,CA:true