net/data/ssl/scripts/ee.cnf

   1 SUBJECT_NAME = req_dn
   2 KEY_SIZE = 2048
   3
   4 [req]
   5 default_bits       = ${ENV::KEY_SIZE}
   6 default_md         = sha256
   7 string_mask        = utf8only
   8 prompt             = no
   9 encrypt_key        = no
  10 distinguished_name = ${ENV::SUBJECT_NAME}
  11 req_extensions     = req_extensions
  12
  13 [req_dn]
  14 C  = US
  15 ST = California
  16 L  = Mountain View
  17 O  = Test CA
  18 CN = 127.0.0.1
  19
  20 [req_duplicate_cn_1]
  21 O  = Foo
  22 CN = Duplicate
  23
  24 [req_duplicate_cn_2]
  25 O  = Bar
  26 CN = Duplicate
  27
  28 [req_localhost_cn]
  29 C  = US
  30 ST = California
  31 L  = Mountain View
  32 O  = Test CA
  33 CN = localhost
  34
  35 [req_punycode_dn]
  36 CN = xn--wgv71a119e.com
  37
  38 [req_extensions]
  39 subjectAltName = IP:127.0.0.1
  40
  41 [req_localhost_san]
  42 subjectAltName = DNS:localhost
  43
  44 [req_punycode]
  45 basicConstraints = critical, CA:true
  46 subjectAltName   = @punycode_san
  47
  48 [req_san_sanity]
  49 basicConstraints = critical, CA:true
  50 subjectAltName   = @san_sanity
  51
  52 [san_sanity]
  53 IP.1  = 127.0.0.2
  54 IP.2  = FE80::1
  55 DNS = test.example
  56 email = test@test.example
  57 otherName = 1.2.3.4;UTF8:ignore me
  58 dirName = more_san_sanity
  59
  60 [req_spdy_pooling]
  61 subjectAltName = @spdy_pooling
  62
  63 [more_san_sanity]
  64 CN=127.0.0.3
  65
  66 [spdy_pooling]
  67 DNS.1 = www.example.org
  68 DNS.2 = mail.example.org
  69 DNS.3 = mail.example.com
  70
  71 [punycode_san]
  72 DNS.1 = xn--wgv71a119e.com
  73 DNS.2 = *.xn--wgv71a119e.com
  74 DNS.3 = blahblahblahblah.com