Files
Tudor Marcu a4fb9ae027 Add missing certificate attributes conf
Signed-off-by: Tudor Marcu <tudor.marcu@intel.com>
2016-12-21 12:18:08 -08:00

26 lines
559 B
INI

[ ca ]
default_ca = myca
[ crl_ext ]
authorityKeyIdentifier=keyid:always
[ req ]
private_key = private.pem
distinguished_name = myca_policy
x509_extensions = ca_extensions
[ myca_policy ]
commonName = supplied
stateOrProvinceName = supplied
countryName = supplied
emailAddress = optional
organizationName = supplied
organizationalUnitName = optional
[ca_extensions]
keyUsage = digitalSignature,keyCertSign,cRLSign
extendedKeyUsage = codeSigning
basicConstraints = critical,CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer