| Harald Welte | 5bbb144 | 2023-12-11 12:46:47 +0100 | [diff] [blame^] | 1 | #openssl x509 extfile params
|
| 2 | extensions = extend
|
| 3 | # This prevent the user to be prompted for values
|
| 4 | prompt = no
|
| 5 |
|
| 6 | distinguished_name = dn-param
|
| 7 | [dn-param] # DN fields
|
| 8 | CN = Test CI
|
| 9 | OU = TESTCERT
|
| 10 | O = RSPTEST
|
| 11 | C = IT
|
| 12 |
|
| 13 | # Extensions for the Test CI
|
| 14 | [extend] # openssl extensions
|
| 15 | subjectKeyIdentifier = hash
|
| 16 |
|
| 17 | basicConstraints = critical, CA:true
|
| 18 |
|
| 19 | certificatePolicies=critical,2.23.146.1.2.1.0
|
| 20 |
|
| 21 | keyUsage =critical, keyCertSign, cRLSign
|
| 22 |
|
| 23 | subjectAltName = RID:2.999.1
|
| 24 |
|
| 25 | crlDistributionPoints=URI:http://ci.test.example.com/CRL-A.crl, URI:http://ci.test.example.com/CRL-B.crl |