[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = AU
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Some-State
localityName = Locality Name (eg, city)
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Internet Widgits Pty Ltd
organizationalUnitName = Organizational Unit Name (eg, section)
commonName = Common Name (eg, YOUR name)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 40
[ req_attributes ]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 20
unstructuredName = An optional company name
Here are the configs for the file: /home/quentusre x/.TinyCA/ testing/ openssl. cnf
[ ca ]
default_ca = server_ca
[ policy_client ] nitName = optional
countryName = optional
stateOrProvinceName = optional
organizationName = optional
organizationalU
commonName = supplied
emailAddress = optional
[ policy_server ] nitName = optional
countryName = optional
stateOrProvinceName = optional
organizationName = optional
organizationalU
commonName = supplied
emailAddress = optional
[ policy_ca ] nitName = optional
countryName = optional
stateOrProvinceName = optional
organizationName = optional
organizationalU
commonName = supplied
emailAddress = optional
[ req ] ed_name
default_bits = 4096
default_keyfile = privkey.pem
distinguished_name = req_distinguish
attributes = req_attributes
x509_extensions = v3_ca
string_mask = nombstr
req_extensions = v3_req
[ req_distinguish ed_name ] Name_default = Some-State ame_default = Internet Widgits Pty Ltd nitName = Organizational Unit Name (eg, section)
countryName = Country Name (2 letter code)
countryName_default = AU
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvince
localityName = Locality Name (eg, city)
0.organizationName = Organization Name (eg, company)
0.organizationN
organizationalU
commonName = Common Name (eg, YOUR name)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 40
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ req_attributes ] rd_min = 4 rd_max = 20
challengePassword = A challenge password
challengePasswo
challengePasswo
unstructuredName = An optional company name
[ v3_ca ] ifier = hash ntifier = keyid:always, issuer: always
subjectKeyIdent
authorityKeyIde
basicConstraints = critical,CA:true
nsCertType = sslCA, emailCA
issuerAltName = issuer:copy
nsComment = "TinyCA Generated Certificate"
subjectAltName = email:copy
keyUsage = critical, keyCertSign, cRLSign
[ crl_ext ] ntifier = keyid:always, issuer: always
authorityKeyIde
[ server_ca ] x/.TinyCA/ testing
dir = /home/quentusre
certs = $dir/certs
crl_dir = $dir/crl
database = $dir/index.txt
new_certs_dir = $dir/newcerts
certificate = $dir/cacert.pem
serial = $dir/serial
crl = $dir/crl.pem
private_key = $dir/cacert.key
RANDFILE = $dir/.rand
x509_extensions = server_cert
default_days = 365
default_crl_days = 30
default_md = sha1
preserve = no
policy = policy_server
unique_subject = yes
[ client_ca ] x/.TinyCA/ testing
dir = /home/quentusre
certs = $dir/certs
crl_dir = $dir/crl
database = $dir/index.txt
new_certs_dir = $dir/newcerts
certificate = $dir/cacert.pem
serial = $dir/serial
crl = $dir/crl.pem
private_key = $dir/cacert.key
RANDFILE = $dir/.rand
x509_extensions = client_cert
default_days = 365
default_crl_days = 30
default_md = sha1
preserve = no
policy = policy_client
unique_subject = yes
[ ca_ca ] x/.TinyCA/ testing
dir = /home/quentusre
certs = $dir/certs
crl_dir = $dir/crl
database = $dir/index.txt
new_certs_dir = $dir/newcerts
certificate = $dir/cacert.pem
serial = $dir/serial
crl = $dir/crl.pem
private_key = $dir/cacert.key
RANDFILE = $dir/.rand
x509_extensions = v3_ca
default_days = 365
default_crl_days = 30
default_md = sha1
preserve = no
policy = policy_ca
unique_subject = yes
[ client_cert ] ifier = hash ntifier = keyid,issuer:always
basicConstraints = CA:FALSE
nsCertType = client, email, objsign
nsComment = "TinyCA Generated Certificate"
subjectKeyIdent
authorityKeyIde
issuerAltName = issuer:copy
subjectAltName = email:copy
keyUsage = digitalSignature, keyEncipherment
[ server_cert ] ifier = hash ntifier = keyid,issuer:always
basicConstraints = CA:FALSE
nsCertType = server
nsComment = "TinyCA Generated Certificate"
subjectKeyIdent
authorityKeyIde
issuerAltName = issuer:copy
subjectAltName = email:copy