Chapter 4 | Section 4.4 |
Operating SSL | Using the OpenSSL Utility |
#This is mostly being used for generation of certificate requests.
RANDFILE = .rnd
####################################################################
[ ca ]
default_ca= CA_default# The default ca section
####################################################################
[ CA_default ]
dir | = G:\\openssl\\\bin\\demoCA# Where everything is kept | |||
certs | = $dir\\certs | # Where the issued certs are kept | ||
crl_dir= $dir\\crl | # Where the issued crl are kept | |||
database= $dir\\index.txt# database index file. | ||||
new_certs_dir= $dir\\newcerts# default place for new certs. | ||||
certificate= $dir\\cacert.pem | # The CA certificate | |||
serial | = $dir\\serial | # The current serial number | ||
crl | = $dir\\crl.pem | # The current CRL | ||
private_key= $dir\\private\\cakey.pem | # The private | key |
|
|
RANDFILE= $dir\\private\\private.rnd # private random | number | file | ||
x509_extensions= x509v3_extensions# The | extentions to | add | to | the cert |
default_days= 365 | # how long to | certify for | ||
default_crl_days= 30# how long before | next CRL | |||
default_md= md5 | # | which md to | use. | |
preserve = no | # | keep passed | DN | ordering |
#A few difference way of specifying how similar the request should l ook
#For type CA, the listed attributes must be the same, and the option
al
#and supplied fields are just
policy = policy_match
#For the CA policy [ policy_match ] countryName = match stateOrProvinceName= match organizationName= match organizationalUnitName= optional commonName = supplied emailAddress = optional
#For the 'anything' policy
#At this point in time, you must list all acceptable 'object'
#types.
[ policy_anything ] countryName= optional stateOrProvinceName= optional localityName= optional organizationName= optional organizationalUnitName= optional commonName = supplied emailAddress = optional
####################################################################
[ req ]
default_bits= 1024
default_keyfile = privkey.pem distinguished_name= req_distinguished_name attributes= req_attributes
HTTPS eWay Adapter User’s Guide | 39 | Sun Microsystems, Inc. |
