1ceremony-type: intermediate
2pkcs11:
3 module: /usr/lib/softhsm/libsofthsm2.so
4 pin: 1234
5 signing-key-slot: {{ .SlotID}}
6 signing-key-label: root signing key (rsa)
7inputs:
8 public-key-path: /hierarchy/intermediate-signing-pub-rsa.pem
9 issuer-certificate-path: /hierarchy/root-cert-rsa.pem
10outputs:
11 certificate-path: {{ .CertPath }}
12certificate-profile:
13 signature-algorithm: SHA256WithRSA
14 common-name: {{ .CommonName }}
15 organization: good guys
16 country: US
17 not-before: 2020-01-01 12:00:00
18 not-after: 2040-01-01 12:00:00
19 crl-url: http://rsa.example.com/crl
20 issuer-url: http://rsa.example.com/cert
21 policies:
22 - oid: 2.23.140.1.2.1
23 key-usages:
24 - Digital Signature
25 - Cert Sign
26 - CRL Sign
View as plain text