...
1# OpenSSL configuration file.
2
3[ req ]
4# Options for the `req` tool (`man req`).
5default_bits = 2048
6distinguished_name = req_distinguished_name
7prompt = no
8# SHA-1 is deprecated, so use SHA-2 instead.
9default_md = sha256
10# Try to force use of PrintableString throughout
11string_mask = pkix
12
13[ req_distinguished_name ]
14C=GB
15ST=London
16L=London
17O=Google
18OU=Eng
19CN=FakeSubIntermediateAuthority
20
21[ v3_user ]
22subjectKeyIdentifier = hash
23authorityKeyIdentifier = keyid:always,issuer
24keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, encipherOnly, decipherOnly
View as plain text