X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=test%2Fcertificates%2Fopenssl-ca.cnf;fp=test%2Fcertificates%2Fopenssl-ca.cnf;h=c79ddf2ac2dc922fa0a51270310800ff749dc78a;hb=f9adb9143ef94b16ae16941652e75deccad506ef;hp=0000000000000000000000000000000000000000;hpb=3a2c5cc0fe9265242032882d68129b7faf47235c;p=ta%2Fremote-installer.git

diff --git a/test/certificates/openssl-ca.cnf b/test/certificates/openssl-ca.cnf
new file mode 100644
index 0000000..c79ddf2
--- /dev/null
+++ b/test/certificates/openssl-ca.cnf
@@ -0,0 +1,46 @@
+HOME            = .
+RANDFILE        = $ENV::HOME/.rnd
+
+####################################################################
+[ ca ]
+default_ca    = CA_default      # The default ca section
+
+[ CA_default ]
+
+dir               = /root/ca
+default_days     = 1000         # How long to certify for
+default_crl_days = 30           # How long before next CRL
+default_md       = sha256       # Use public key default MD
+preserve         = no           # Keep passed DN ordering
+
+x509_extensions = ca_extensions # The extensions to add to the cert
+
+email_in_dn     = no            # Don't concat the email in the DN
+copy_extensions = copy          # Required to copy SANs from CSR to cert
+
+####################################################################
+[ req ]
+prompt = no
+default_bits       = 4096
+default_keyfile    = cakey.pem
+distinguished_name = ca_distinguished_name
+x509_extensions    = ca_extensions
+string_mask        = utf8only
+
+####################################################################
+[ ca_distinguished_name ]
+countryName           = FI
+organizationName      = Nokia OY
+# commonName          = Nokia
+# commonName_default  = Test Server
+# emailAddress        = test@server.com
+stateOrProvinceName   = Uusimaa
+localityName          = Espoo
+
+####################################################################
+[ ca_extensions ]
+
+subjectKeyIdentifier   = hash
+authorityKeyIdentifier = keyid:always, issuer
+basicConstraints       = critical, CA:true
+keyUsage               = keyCertSign, cRLSign