deploy/site/secrets/certs/root-ca.conf

   1 [ req ]
   2 encrypt_key = no
   3 prompt = no
   4 utf8 = yes
   5 default_md = sha256
   6 default_bits = 4096
   7 req_extensions = req_ext
   8 x509_extensions = req_ext
   9 distinguished_name = req_dn
  10 [ req_ext ]
  11 subjectKeyIdentifier = hash
  12 basicConstraints = critical, CA:true
  13 keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, keyCertSign
  14 [ req_dn ]
  15 O = project-emco.io
  16 CN = Root CA