1 [Root5CA]

     2 

     3 database        = index.txt				# index file.

     4 new_certs_dir   = .						# new certs dir

     5  

     6 certificate     = ../root5ca.pem		# The CA cert

     7 serial          = serial				# serial no file

     8 private_key     = ../root5ca_key.pem		# CA private key

     9 RANDFILE        = rand  	  			# random number file

    10  

    11 default_days    = 365							# how long to certify for

    12 default_crl_days= 30					# how long before next CRL

    13 default_md      = md5					# md to use

    14 

    15 policy          = policy_any			# default policy

    16 email_in_dn     = no					# Don't add the email into cert DN

    17 

    18 name_opt        = ca_default			# Subject name display option

    19 cert_opt        = ca_default			# Certificate display option

    20 copy_extensions = none					# Don't copy extensions from request

    21 

    22 [policy_any]

    23 countryName            = supplied

    24 stateOrProvinceName    = optional

    25 organizationName       = optional

    26 organizationalUnitName = optional

    27 commonName             = supplied

    28 emailAddress           = optional

    29 

    30 [ca_policy]

    31 organizationName       = supplied

    32 commonName             = supplied

    33 

    34 [Signing_Extensions] 

    35 extendedKeyUsage=codeSigning