github.com/sl1pm4t/consul@v1.4.5-0.20190325224627-74c31c540f9c/test/hostname/myca.conf (about) 1 [ ca ] 2 default_ca = myca 3 4 [ crl_ext ] 5 # issuerAltName=issuer:copy #this would copy the issuer name to altname 6 authorityKeyIdentifier=keyid:always 7 8 [ myca ] 9 new_certs_dir = /tmp 10 unique_subject = no 11 certificate = CertAuth.crt 12 database = certindex 13 private_key = privkey.pem 14 serial = serialfile 15 default_days = 36500 16 default_md = sha1 17 policy = myca_policy 18 x509_extensions = myca_extensions 19 20 [ myca_policy ] 21 commonName = supplied 22 stateOrProvinceName = supplied 23 countryName = supplied 24 emailAddress = optional 25 organizationName = supplied 26 organizationalUnitName = optional 27 28 [ myca_extensions ] 29 basicConstraints = CA:false 30 subjectKeyIdentifier = hash 31 authorityKeyIdentifier = keyid:always 32 keyUsage = digitalSignature,keyEncipherment 33 extendedKeyUsage = serverAuth 34 crlDistributionPoints = URI:http://path.to.crl/myca.crl