#
# OpenSSL configuration file.
#
 
# Establish working directory.
 


dir = /etc/easyca/ca 




[ ca ]
default_ca				= CA_default
 
[ CA_default ]
serial					= $dir/serial
database				= $dir/certindex.txt
new_certs_dir				= $dir/certs
certificate				= $dir/cacert.pem
private_key				= $dir/private/cakey.pem
default_days				= 1095
default_md				= md5
preserve				= no
email_in_dn				= no
nameopt					= default_ca
certopt					= default_ca
policy					= policy_match
 
[ policy_match ]
countryName				= match
stateOrProvinceName			= match
organizationName			= match
organizationalUnitName			= optional
commonName				= supplied
emailAddress				= optional
 
[ req ]
default_bits				= 1024			# Size of keys
default_keyfile				= key.pem		# name of generated keys
default_md				= md5				# message digest algorithm
string_mask				= nombstr		# permitted characters
distinguished_name			= req_distinguished_name
req_extensions				= v3_req
 
[ req_distinguished_name ]
# Variable name				Prompt string
#-------------------------	  ----------------------------------
0.organizationName			= Organization Name (company)
0.organizationName_default      = $ENV::KEY_ORG
organizationalUnitName			= Organizational Unit Name (department, division)
organizationalUnitName_default = $ENV::KEY_OU
emailAddress				= Email Address
emailAddress_default            = $ENV::KEY_EMAIL
emailAddress_max			= 40
localityName				= Locality Name (city, district)
localityName_default            = $ENV::KEY_CITY
stateOrProvinceName			= State or Province Name (full name)
stateOrProvinceName_default     = $ENV::KEY_PROVINCE
countryName				= Country Name (2 letter code)
countryName_default             = $ENV::KEY_COUNTRY
countryName_min				= 2
countryName_max				= 2
commonName				= Common Name (hostname, IP, or your name)
commonName_default = $ENV::KEY_CN
commonName_max				= 64
 
# Default values for the above, for consistency and less typing.
# Variable name				Value
#------------------------	  ------------------------------
#0.organizationName_default		 = $ENV::KEY_ORG
#localityName_default			 = $ENV::KEY_CITY
#stateOrProvinceName_default		  = $ENV::KEY_PROVINCE
#countryName_default 		 = $ENV::KEY_CN
 
[ v3_ca ]
basicConstraints			= CA:TRUE
subjectKeyIdentifier			= hash
authorityKeyIdentifier			= keyid:always,issuer:always
 
[ v3_req ]
basicConstraints			= CA:FALSE
subjectKeyIdentifier			= hash