[ req ]
default_bits = 1024
default_keyfile =
privkey.pem
distinguished_name =
req_distinguished_name
attributes =
req_attributes
x509_extensions = v3_ca # The extentions to add to the self
signed cert
# Passwords for private keys if not present they will be prompted
for
#input_password = file:/root/a
# output_password = secret
# This sets a mask for permitted string types. There are several options.
# default: PrintableString, T61String, BMPString.
# pkix :
PrintableString, BMPString.
# utf8only: only UTF8Strings.
# nombstr :
PrintableString, T61String (no BMPStrings or UTF8Strings).
# MASK:XXXX a
literal mask value.
# WARNING: current versions of Netscape crash on
BMPStrings or UTF8Strings
# so use this option with caution!
string_mask =
nombstr
# req_extensions = v3_req # The extensions to add to a certificate
request
[ req_distinguished_name ]
countryName = Country
Name (2 letter code)
countryName_default =
GB
countryName_min = 2
countryName_max =
2
stateOrProvinceName = State or Province Name (full
name)
stateOrProvinceName_default = Berkshire
localityName = Locality Name (eg,
city)
localityName_default = Newbury
0.organizationName = Organization Name (eg,
company)
0.organizationName_default = My Company Ltd
# we can do this but it is not needed normally
:-)
#1.organizationName = Second Organization Name (eg,
company)
#1.organizationName_default = World Wide Web Pty Ltd
organizationalUnitName = Organizational Unit Name (eg,
section)
#organizationalUnitName_default =
commonName = Common Name (eg, your name or your
server\'s hostname)
commonName_max = 64
emailAddress = Email
Address
emailAddress_max = 64
# SET-ex3 = SET extension number 3
# SET-ex3 = SET extension number 3
[ req_attributes ]
challengePassword = A challenge
password
challengePassword_min =
4
challengePassword_max = 20
unstructuredName = An optional company name
阅读(2548) | 评论(0) | 转发(0) |
