1# OpenSSL configuration file.
2
3[ req ]
4# Options for the `req` tool (`man req`).
5default_bits = 2048
6distinguished_name = req_distinguished_name
7prompt = no
8# SHA-1 is deprecated, so use SHA-2 instead.
9default_md = sha256
10# Try to force use of PrintableString throughout
11string_mask = pkix
12
13[ req_distinguished_name ]
14C=GB
15ST=London
16L=London
17O=Google
18OU=Eng
19CN=FakeIntermediateAuthority
20
21[ v3_user ]
22subjectKeyIdentifier = hash
23authorityKeyIdentifier = keyid:always,issuer
24keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, encipherOnly, decipherOnly
25
26[ v3_user_serverAuth ]
27subjectKeyIdentifier = hash
28authorityKeyIdentifier = keyid:always,issuer
29keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, encipherOnly, decipherOnly
30extendedKeyUsage = serverAuth
31
32[ v3_user_plus ]
33subjectKeyIdentifier = hash
34authorityKeyIdentifier = keyid:always,issuer
35keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, encipherOnly, decipherOnly
36extendedKeyUsage = serverAuth,2.16.840.1.113741.1.2.3
View as plain text