[general]

pki_dir = /opt/pki

[openssl_config]
root_name = Tranquil IT
country = FR
state = Pays de la Loire
city = Saint Sebastien Sur Loire
organization_name = Tranquil IT
organization_ou = Tranquil IT CA
organization_cn = Tranquil IT Root CA

default_cert_duration = 730
default_crl_duration = 90

crl_uri = URI:http://crl.ad.tranquil.it/crl/tranquilit_root.crl

create_intermediate = True
intermediate_organization_cn = Tranquil IT Authentication CA
intermediate_crl_uri = URI:http://crl.ad.tranquil.it/crl/tranquilit_authentication.crl

# If you use Yubikey, max value is 2048 ; Nitrokey can be 4096
default_bits_user = 2048

[samba_ad]
dc_list = srvads1.ad.tranquil.it,srvads2.ad.tranquil.it
upn_suffix = ad.tranquil.it