OpenSSL Req config file

gentoo.cnf (text/plain), 1.91 KB, created by Robin Johnson on 2008-05-23 14:23:48 UTC

# OpenSSL configuration file for generation of Gentoo Linux certificate
# requests.
#
# Current instructions, as of 2008/05/23:
# 1. download gentoo.cnf from bug #223347
# 2. export CNAME="FOOBAR.gentoo.org"
# 3. export NAME="$(date -u +%Y%m%d)_gentoo_${CNAME}"
# 4. openssl genrsa -out ${NAME}.key 1024
# 5. openssl req -config gentoo.cnf -text -out ${NAME}.csr -key ${NAME}.key -new
# 6. email ${CSR}.csr to [e-mail], and leave a comment on bug #223347
#    with the name of the file.

# This definition stops the following lines choking if HOME isn't
# defined.
HOME			= .
RANDFILE		= $ENV::HOME/.rnd

####################################################################
[ req ]
default_bits		= 1024
default_keyfile 	= privkey.pem
distinguished_name	= req_distinguished_name
attributes		= req_attributes
string_mask = nombstr
req_extensions = v3_req

[ req_distinguished_name ]
countryName			= Country Name (2 letter code)
countryName_default		= US
countryName_min			= 2
countryName_max			= 2

stateOrProvinceName		= State or Province Name (full name)
stateOrProvinceName_default	= New Mexico

localityName			= Locality Name (eg, city)
localityName_default	= Albuquerque

0.organizationName			= Organization Name (eg, company)
0.organizationName_default	= GENTOO Foundation, Inc.

organizationalUnitName			= Organizational Unit Name (eg, section)
#organizationalUnitName_default	=

commonName				= Common Name (eg, YOUR name)
commonName_max			= 64
commonName_default		= $ENV::CNAME

emailAddress			= Email Address
emailAddress_max		= 64
emailAddress_default	= [e-mail]

# SET-ex3			= SET extension number 3

[ req_attributes ]
#X#challengePassword		= A challenge password
#X#challengePassword_min		= 4
#X#challengePassword_max		= 20
#X#
#X#unstructuredName		= An optional company name

[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment