Ignore machine-check MSRs
[freebsd-src/fkvm-freebsd.git] / crypto / openssl / test / CAss.cnf
blob20f8f05e3dfd36febc570603016a364288a76c50
2 # SSLeay example configuration file.
3 # This is mostly being used for generation of certificate requests.
6 RANDFILE                = ./.rnd
8 ####################################################################
9 [ req ]
10 default_bits            = 512
11 default_keyfile         = keySS.pem
12 distinguished_name      = req_distinguished_name
13 encrypt_rsa_key         = no
14 default_md              = sha1
16 [ req_distinguished_name ]
17 countryName                     = Country Name (2 letter code)
18 countryName_default             = AU
19 countryName_value               = AU
21 organizationName                = Organization Name (eg, company)
22 organizationName_value          = Dodgy Brothers
24 commonName                      = Common Name (eg, YOUR name)
25 commonName_value                = Dodgy CA
27 ####################################################################
28 [ ca ]
29 default_ca      = CA_default            # The default ca section
31 ####################################################################
32 [ CA_default ]
34 dir             = ./demoCA              # Where everything is kept
35 certs           = $dir/certs            # Where the issued certs are kept
36 crl_dir         = $dir/crl              # Where the issued crl are kept
37 database        = $dir/index.txt        # database index file.
38 #unique_subject = no                    # Set to 'no' to allow creation of
39                                         # several ctificates with same subject.
40 new_certs_dir   = $dir/newcerts         # default place for new certs.
42 certificate     = $dir/cacert.pem       # The CA certificate
43 serial          = $dir/serial           # The current serial number
44 crl             = $dir/crl.pem          # The current CRL
45 private_key     = $dir/private/cakey.pem# The private key
46 RANDFILE        = $dir/private/.rand    # private random number file
48 x509_extensions = v3_ca                 # The extentions to add to the cert
50 name_opt        = ca_default            # Subject Name options
51 cert_opt        = ca_default            # Certificate field options
53 default_days    = 365                   # how long to certify for
54 default_crl_days= 30                    # how long before next CRL
55 default_md      = md5                   # which md to use.
56 preserve        = no                    # keep passed DN ordering
58 policy          = policy_anything
60 [ policy_anything ]
61 countryName             = optional
62 stateOrProvinceName     = optional
63 localityName            = optional
64 organizationName        = optional
65 organizationalUnitName  = optional
66 commonName              = supplied
67 emailAddress            = optional
71 [ v3_ca ]
72 subjectKeyIdentifier=hash
73 authorityKeyIdentifier=keyid:always,issuer:always
74 basicConstraints = CA:true,pathlen:1
75 keyUsage = cRLSign, keyCertSign
76 issuerAltName=issuer:copy