[ADD] First commit

2023-01-31 22:04:12 +01:00
commit 72e8b513a1
7 changed files with 556 additions and 0 deletions
@@ -0,0 +1,53 @@
+[ ca ]
+default_ca = {{ organization_ou }} 
+
+[ CA_default ]
+dir                 = {{ pki_dir }}
+certs               = $dir/certs
+crl_dir             = $dir/crl
+new_certs_dir       = $dir/newcerts
+database            = $dir/index.txt
+serial              = $dir/serial
+private_key			= $dir/private/root_ca.key
+RANDFILE			= $dir/private/.rand
+
+default_md          = sha512
+
+name_opt            = ca_default
+cert_opt            = ca_default
+default_days        = {{ default_cert_duration }}
+preserve            = no
+policy              = policy_strict
+
+[ policy_strict ]
+countryName             = match
+stateOrProvinceName     = match
+organizationName        = match
+organizationalUnitName  = optional
+commonName              = supplied
+emailAddress            = optional
+
+[ req ]
+defaults_bits       = 4096
+distinguished_name  = req_distinguished_name
+string_mask         = utf8only
+prompt              = no
+
+default_md          = sha512
+
+[ req_distinguished_name ]
+C                   = {{ country }}
+ST                  = {{ state }}
+L                   = {{ city }}
+O                   = {{ organization_name }}
+OU                  = {{ organization_ou }}
+CN                  = {{ organization_cn }}
+
+[ v3_ca ]
+subjectKeyIdentifier        = hash
+authorityKeyIdentifier      = keyid:always,issuer
+basicConstraints            = critical, CA:true
+keyUsage                    = critical, digitalSignature, cRLSign, keyCertSign
+
+crlDistributionPoints       = {{ crl_uri }}
+