github.com/outbrain/consul@v1.4.5/test/ca/myca.conf (about) 1 [ ca ] 2 default_ca = myca 3 4 [ crl_ext ] 5 # issuerAltName=issuer:copy #this would copy the issuer name to altname 6 authorityKeyIdentifier=keyid:always 7 8 [ myca ] 9 new_certs_dir = /tmp 10 unique_subject = no 11 certificate = root.cer 12 database = certindex 13 private_key = privkey.pem 14 serial = serialfile 15 default_days = 36500 16 default_md = sha1 17 policy = myca_policy 18 x509_extensions = myca_extensions 19 20 [ myca_policy ] 21 commonName = supplied 22 stateOrProvinceName = supplied 23 countryName = supplied 24 emailAddress = optional 25 organizationName = supplied 26 organizationalUnitName = optional 27 28 [ myca_extensions ] 29 basicConstraints = CA:false 30 subjectKeyIdentifier = hash 31 authorityKeyIdentifier = keyid:always 32 keyUsage = digitalSignature,keyEncipherment 33 extendedKeyUsage = serverAuth,clientAuth 34 crlDistributionPoints = URI:http://path.to.crl/myca.crl