test/ssl.conf

   1 # openssl req -newkey ec:ecparam.pem -sha256 -nodes -subj "/C=JP/ST=Tokyo/O=Snake Oil Company/CN=Snake Oil company Root Certificate Authority" -out ca_cert.pem -keyout ca_key.pem -x509 -days 800 -extensions v3_ca -config ../../test/ssl.conf
   2 [v3_ca]
   3 basicConstraints = critical, CA:true
   4 keyUsage = critical, keyCertSign, cRLSign
   5 subjectKeyIdentifier = hash
   6 authorityKeyIdentifier = keyid,issuer
   7
   8 #
   9 [v3_req]
  10 basicConstraints = CA:FALSE
  11 # keyUsage = critical, keyEncipherment, dataEncipherment, digitalSignature, keyAgreement
  12 keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
  13 extendedKeyUsage = serverAuth
  14 subjectAltName = @alt_names
  15
  16 [server_ext]
  17 authorityKeyIdentifier=keyid,issuer
  18 basicConstraints=CA:FALSE
  19 subjectAltName = @alt_names
  20 keyUsage = digitalSignature
  21 extendedKeyUsage = serverAuth
  22
  23 [alt_names]
  24 DNS.1 = localhost
  25 DNS.2 = [::1]
  26 IP.1 = 127.0.0.1
  27 IP.2 = ::1