hub.fastgit.org/hashicorp/consul.git@v1.4.5/test/ca/myca.conf (about)

     1  [ ca ]
     2  default_ca = myca
     3  
     4  [ crl_ext ]
     5  # issuerAltName=issuer:copy  #this would copy the issuer name to altname
     6  authorityKeyIdentifier=keyid:always
     7  
     8  [ myca ]
     9  new_certs_dir = /tmp
    10  unique_subject = no
    11  certificate = root.cer
    12  database = certindex
    13  private_key = privkey.pem
    14  serial = serialfile
    15  default_days = 36500
    16  default_md = sha1
    17  policy = myca_policy
    18  x509_extensions = myca_extensions
    19  
    20  [ myca_policy ]
    21  commonName = supplied
    22  stateOrProvinceName = supplied
    23  countryName = supplied
    24  emailAddress = optional
    25  organizationName = supplied
    26  organizationalUnitName = optional
    27  
    28  [ myca_extensions ]
    29  basicConstraints = CA:false
    30  subjectKeyIdentifier = hash
    31  authorityKeyIdentifier = keyid:always
    32  keyUsage = digitalSignature,keyEncipherment
    33  extendedKeyUsage = serverAuth,clientAuth
    34  crlDistributionPoints = URI:http://path.to.crl/myca.crl