Files
noq/certs/openssl.cnf
T
2018-04-26 16:14:35 +02:00

18 lines
517 B
INI

[server]
basicConstraints = critical, CA:false
keyUsage = nonRepudiation, digitalSignature
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
subjectAltName = @names
[ca]
subjectKeyIdentifier = hash
extendedKeyUsage = critical, serverAuth, clientAuth
basicConstraints = CA:true
keyUsage = cRLSign, keyCertSign, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign, cRLSign
[names]
DNS.1 = example.com
DNS.2 = sub.example.com
DNS.3 = localhost