google.golang.org/grpc@v1.74.2/testdata/spiffe_end2end/intermediate.cnf (about)

     1  [ca]
     2  default_ca = CA_intermediate
     3  
     4  [CA_intermediate]
     5  dir               = .
     6  certs             = $dir/certs
     7  crl_dir           = $dir/crl
     8  new_certs_dir     = $dir/newcerts
     9  database          = $dir/index.txt
    10  serial            = $dir/serial
    11  RANDFILE          = $dir/private/.rand
    12  private_key = $dir/intermediate_ca.key
    13  certificate = $dir/intermediate_ca.pem
    14  crl = $dir/intermediate.crl
    15  
    16  # For certificate revocation lists.
    17  crlnumber         = $dir/crlnumber
    18  crl               = $dir/crl/intermediate.crl
    19  crl_extensions    = crl_ext
    20  default_crl_days  = 3650
    21  
    22  default_md = sha256
    23  
    24  [req]
    25  distinguished_name = req_distinguished_name
    26  req_extensions = v3_req
    27  prompt = no
    28  
    29  [req_distinguished_name]
    30  CN = intermediatecert.example.com
    31  
    32  [crl_ext]
    33  authorityKeyIdentifier=keyid:always
    34  
    35  [v3_req]
    36  keyUsage = critical, digitalSignature, keyEncipherment, keyCertSign, cRLSign
    37  extendedKeyUsage = clientAuth, serverAuth
    38  basicConstraints = critical, CA:true