You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
206 lines
5.7 KiB
206 lines
5.7 KiB
# |
|
# Copyright (c) 2009, Oracle and/or its affiliates. All rights reserved. |
|
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
|
# |
|
# This code is free software; you can redistribute it and/or modify it |
|
# under the terms of the GNU General Public License version 2 only, as |
|
# published by the Free Software Foundation. Oracle designates this |
|
# particular file as subject to the "Classpath" exception as provided |
|
# by Oracle in the LICENSE file that accompanied this code. |
|
# |
|
# This code is distributed in the hope that it will be useful, but WITHOUT |
|
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
# version 2 for more details (a copy is included in the LICENSE file that |
|
# accompanied this code). |
|
# |
|
# You should have received a copy of the GNU General Public License version |
|
# 2 along with this work; if not, write to the Free Software Foundation, |
|
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
# |
|
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
|
# or visit www.oracle.com if you need additional information or have any |
|
# questions. |
|
# |
|
|
|
# |
|
# OpenSSL configuration file. |
|
# |
|
|
|
HOME = . |
|
RANDFILE = $ENV::HOME/.rnd |
|
|
|
[ ca ] |
|
default_ca = CA_default |
|
|
|
[ CA_default ] |
|
dir = ./top |
|
certs = $dir/certs |
|
crl_dir = $dir/crl |
|
database = $dir/index.txt |
|
unique_subject = no |
|
new_certs_dir = $dir/newcerts |
|
certificate = $dir/cacert.pem |
|
serial = $dir/serial |
|
crlnumber = $dir/crlnumber |
|
crl = $dir/crl.pem |
|
private_key = $dir/private/cakey.pem |
|
RANDFILE = $dir/private/.rand |
|
x509_extensions = v3_ca |
|
|
|
name_opt = ca_default |
|
cert_opt = ca_default |
|
|
|
default_days = 7650 |
|
default_crl_days = 30 |
|
default_md = sha1 |
|
preserve = no |
|
|
|
policy = policy_anything |
|
|
|
[ ca_top ] |
|
dir = ./root |
|
certs = $dir/certs |
|
crl_dir = $dir/crl |
|
database = $dir/index.txt |
|
unique_subject = no |
|
new_certs_dir = $dir/newcerts |
|
certificate = $dir/cacert.pem |
|
serial = $dir/serial |
|
crlnumber = $dir/crlnumber |
|
crl = $dir/crl.pem |
|
private_key = $dir/private/cakey.pem |
|
RANDFILE = $dir/private/.rand |
|
|
|
x509_extensions = v3_ca |
|
|
|
name_opt = ca_default |
|
cert_opt = ca_default |
|
|
|
default_days = 7650 |
|
default_crl_days = 30 |
|
default_md = sha1 |
|
preserve = no |
|
|
|
policy = policy_anything |
|
|
|
[ ca_subca ] |
|
dir = ./subca |
|
certs = $dir/certs |
|
crl_dir = $dir/crl |
|
database = $dir/index.txt |
|
unique_subject = no |
|
new_certs_dir = $dir/newcerts |
|
|
|
certificate = $dir/cacert.pem |
|
serial = $dir/serial |
|
crlnumber = $dir/crlnumber |
|
crl = $dir/crl.pem |
|
private_key = $dir/private/cakey.pem |
|
RANDFILE = $dir/private/.rand |
|
|
|
x509_extensions = usr_cert |
|
|
|
name_opt = ca_default |
|
cert_opt = ca_default |
|
|
|
default_days = 7650 |
|
default_crl_days = 30 |
|
default_md = sha1 |
|
preserve = no |
|
|
|
policy = policy_anything |
|
|
|
[ policy_match ] |
|
countryName = match |
|
stateOrProvinceName = match |
|
organizationName = match |
|
organizationalUnitName = optional |
|
commonName = supplied |
|
emailAddress = optional |
|
|
|
[ policy_anything ] |
|
countryName = optional |
|
stateOrProvinceName = optional |
|
localityName = optional |
|
organizationName = optional |
|
organizationalUnitName = optional |
|
commonName = supplied |
|
emailAddress = optional |
|
|
|
[ req ] |
|
default_bits = 1024 |
|
default_keyfile = privkey.pem |
|
distinguished_name = req_distinguished_name |
|
attributes = req_attributes |
|
x509_extensions = v3_ca |
|
|
|
string_mask = nombstr |
|
|
|
[ req_distinguished_name ] |
|
countryName = Country Name (2 letter code) |
|
countryName_default = NO |
|
countryName_min = 2 |
|
countryName_max = 2 |
|
|
|
stateOrProvinceName = State or Province Name (full name) |
|
stateOrProvinceName_default = A-State |
|
|
|
localityName = Locality Name (eg, city) |
|
|
|
0.organizationName = Organization Name (eg, company) |
|
0.organizationName_default = Internet Widgits Pty Ltd |
|
|
|
organizationalUnitName = Organizational Unit Name (eg, section) |
|
|
|
commonName = Common Name (eg, YOUR name) |
|
commonName_max = 64 |
|
|
|
emailAddress = Email Address |
|
emailAddress_max = 64 |
|
|
|
[ req_attributes ] |
|
challengePassword = A challenge password |
|
challengePassword_min = 4 |
|
challengePassword_max = 20 |
|
unstructuredName = An optional company name |
|
|
|
|
|
[ usr_cert ] |
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment |
|
|
|
subjectKeyIdentifier = hash |
|
authorityKeyIdentifier = keyid,issuer |
|
|
|
[ v3_req ] |
|
basicConstraints = CA:FALSE |
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment |
|
subjectAltName = email:example@openjdk.net, RID:1.2.3.4:true |
|
|
|
[ v3_ca ] |
|
subjectKeyIdentifier = hash |
|
authorityKeyIdentifier = keyid:always,issuer:always |
|
basicConstraints = critical,CA:true |
|
keyUsage = keyCertSign |
|
|
|
[ cert_issuer ] |
|
subjectKeyIdentifier = hash |
|
authorityKeyIdentifier = keyid:always,issuer:always |
|
basicConstraints = critical,CA:true |
|
keyUsage = keyCertSign |
|
|
|
|
|
[ crl_issuer ] |
|
subjectKeyIdentifier = hash |
|
authorityKeyIdentifier = keyid:always,issuer:always |
|
keyUsage = cRLSign |
|
|
|
|
|
[ crl_ext ] |
|
authorityKeyIdentifier = keyid:always,issuer:always |
|
|
|
[ ee_of_subca ] |
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment, keyAgreement |
|
|
|
subjectKeyIdentifier = hash |
|
authorityKeyIdentifier = keyid,issuer
|
|
|