mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-04-06 20:46:32 +02:00
50 lines
1.1 KiB
Plaintext
50 lines
1.1 KiB
Plaintext
[ca]
|
|
default_ca = CA_default
|
|
|
|
[CA_default]
|
|
dir = .
|
|
certs = $dir
|
|
new_certs_dir = $dir
|
|
database = ./test-ca-index.txt
|
|
serial = ./test-ca-serial.txt
|
|
|
|
default_md = sha256
|
|
|
|
name_opt = ca_default
|
|
cert_opt = ca_default
|
|
default_days = 3653
|
|
policy = policy_loose
|
|
|
|
[policy_loose]
|
|
countryName = optional
|
|
stateOrProvinceName = optional
|
|
localityName = optional
|
|
organizationName = optional
|
|
organizationalUnitName = optional
|
|
commonName = supplied
|
|
emailAddress = optional
|
|
|
|
[server_cert]
|
|
basicConstraints = CA:FALSE
|
|
nsCertType = server
|
|
nsComment = "Mbed TLS Generated Server Certificate"
|
|
subjectKeyIdentifier = hash
|
|
authorityKeyIdentifier = keyid,issuer:always
|
|
keyUsage = critical, digitalSignature, keyEncipherment
|
|
extendedKeyUsage = serverAuth
|
|
authorityInfoAccess = OCSP;URI:http://localhost:4455
|
|
|
|
[req]
|
|
x509_extensions = v3_ca
|
|
distinguished_name = req_dn
|
|
|
|
[req_dn]
|
|
countryName = NL
|
|
organizationalUnitName = PolarSSL
|
|
commonName = PolarSSL Test CA
|
|
|
|
[v3_ca]
|
|
subjectKeyIdentifier=hash
|
|
authorityKeyIdentifier=keyid:always,issuer:always
|
|
basicConstraints = CA:true
|