Home Explore 引导页 在线工具 Blog
Register Sign In
Pchen0
/
electron
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Branch: 10-x-y
Branches Tags
electron
/
spec
/
fixtures
/
certificates
/
certs.cnf

certs.cnf 1.8 KB
Permalink History Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768 
  1. ID=1
    2. 

  2. CA_DIR=out
    3. 

  3. 

  4. [ca]
    5. 

  5. default_ca = ca_settings
    6. 

  6. 

  7. [ca_settings]
    8. 

  8. dir             = ${ENV::CA_DIR}
    9. 

  9. database        = $dir/${ENV::ID}-index.txt
    10. 

  10. new_certs_dir   = $dir
    11. 

  11. serial          = $dir/${ENV::ID}-serial
    12. 

  12. certificate     = $dir/${ENV::ID}.pem
    13. 

  13. private_key     = $dir/${ENV::ID}.key
    14. 

  14. RANDFILE        = $dir/rand
    15. 

  15. default_md      = sha256
    16. 

  16. default_days    = 3650
    17. 

  17. policy          = policy_anything
    18. 

  18. preserve        = no
    19. 

  19. 

  20. [policy_anything]
    21. 

  21. # Default signing policy
    22. 

  22. countryName            = optional
    23. 

  23. stateOrProvinceName    = optional
    24. 

  24. localityName           = optional
    25. 

  25. organizationName       = optional
    26. 

  26. organizationalUnitName = optional
    27. 

  27. commonName             = supplied
    28. 

  28. emailAddress           = optional
    29. 

  29. 

  30. [req]
    31. 

  31. default_bits       = 2048
    32. 

  32. default_md         = sha256
    33. 

  33. string_mask        = utf8only
    34. 

  34. distinguished_name = req_env_dn
    35. 

  35. prompt             = no
    36. 

  36. 

  37. [user_cert]
    38. 

  38. basicConstraints = CA:FALSE
    39. 

  39. nsCertType = client
    40. 

  40. nsComment = "OpenSSL Generated Client Certificate"
    41. 

  41. subjectKeyIdentifier = hash
    42. 

  42. authorityKeyIdentifier = keyid,issuer
    43. 

  43. keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
    44. 

  44. extendedKeyUsage = clientAuth, emailProtection
    45. 

  45. 

  46. [server_cert]
    47. 

  47. basicConstraints = CA:FALSE
    48. 

  48. nsCertType = server
    49. 

  49. nsComment = "OpenSSL Generated Server Certificate"
    50. 

  50. subjectKeyIdentifier = hash
    51. 

  51. authorityKeyIdentifier = keyid,issuer:always
    52. 

  52. keyUsage = critical, digitalSignature, keyEncipherment
    53. 

  53. extendedKeyUsage = serverAuth
    54. 

  54. 

  55. [ca_cert]
    56. 

  56. subjectKeyIdentifier = hash
    57. 

  57. authorityKeyIdentifier = keyid:always,issuer
    58. 

  58. basicConstraints = critical, CA:true
    59. 

  59. keyUsage = critical, digitalSignature, cRLSign, keyCertSign
    60. 

  60. 

  61. [ca_intermediate_cert]
    62. 

  62. subjectKeyIdentifier = hash
    63. 

  63. authorityKeyIdentifier = keyid:always,issuer
    64. 

  64. basicConstraints = critical, CA:true, pathlen:0
    65. 

  65. keyUsage = critical, digitalSignature, cRLSign, keyCertSign
    66. 

  66. 

  67. [req_env_dn]
    68. 

  68. commonName = ${ENV::COMMON_NAME}
    69.