pkiutilities/ocsp/test/server/OpenSSL/openssl.config
changeset 0 164170e6151a
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/pkiutilities/ocsp/test/server/OpenSSL/openssl.config	Tue Jan 26 15:20:08 2010 +0200
@@ -0,0 +1,56 @@
+# openssl.config
+#
+# Config file for OpenSSL CA
+
+[ ca ]
+
+default_ca      = ca_default            # The default ca section
+
+[ ca1 ]
+
+dir            = ./ca1
+database       = $dir/index.txt         # index file.
+new_certs_dir  = $dir/certs             # new certs dir
+
+certificate    = $dir/cacert.pem        # The CA cert
+serial         = $dir/serial            # serial no file
+private_key    = $dir/private/cakey.pem # CA private key
+RANDFILE       = $dir/private/.rand     # random number file
+
+default_days   = 365                    # how long to certify for
+default_crl_days= 30                    # how long before next CRL
+default_md     = md5                    # md to use
+
+policy         = ca_policy              # our policy
+email_in_dn    = no                     # Don't add the email into cert DN
+
+nameopt        = default_ca             # Subject name display option
+certopt        = default_ca             # Certificate display option
+copy_extensions = none                  # Don't copy extensions from request
+
+[ ca2 ]
+
+dir            = ./ca2
+database       = $dir/index.txt         # index file.
+new_certs_dir  = $dir/certs             # new certs dir
+
+certificate    = $dir/cacert.pem        # The CA cert
+serial         = $dir/serial            # serial no file
+private_key    = $dir/private/cakey.pem # CA private key
+RANDFILE       = $dir/private/.rand     # random number file
+
+default_days   = 365                    # how long to certify for
+default_crl_days= 30                    # how long before next CRL
+default_md     = md5                    # md to use
+
+policy         = ca_policy              # our policy
+email_in_dn    = no                     # Don't add the email into cert DN
+
+nameopt        = default_ca             # Subject name display option
+certopt        = default_ca             # Certificate display option
+copy_extensions = none                  # Don't copy extensions from request
+
+[ ca_policy ]
+
+organizationName       = supplied
+commonName             = supplied