# # Default configuration to use when one # is not provided on the command line. # [ ca ] default_ca = CA_request # # Default location of directories and # files needed to generate certificates. # [ CA_request ] dir = ./rootCA database = $dir/index.txt new_certs_dir = $dir/certs certificate = $dir/cacert.pem serial = $dir/serial private_key = $dir/private/cakey.pem # # Default expiration and encryption # policies for certificates. # default_days = 365 default_crl_days = 1825 default_md = sha1 policy = req_policy # # Information to be moved from # request to the certificate # nameopt = ca_default certopt = ca_default copy_extensions = copy x509_extensions = cert_extensions # # The default policy to use when # generating the certificate. # [ req_policy ] countryName = supplied stateOrProvinceName = optional organizationName = supplied organizationalUnitName = optional commonName = supplied emailAddress = supplied [ cert_extensions ] basicConstraints = CA:false