--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/pkiutilities/ocsp/test/server/OpenSSL/openssl.config Tue Jan 26 15:20:08 2010 +0200
@@ -0,0 +1,56 @@
+# openssl.config
+#
+# Config file for OpenSSL CA
+
+[ ca ]
+
+default_ca = ca_default # The default ca section
+
+[ ca1 ]
+
+dir = ./ca1
+database = $dir/index.txt # index file.
+new_certs_dir = $dir/certs # new certs dir
+
+certificate = $dir/cacert.pem # The CA cert
+serial = $dir/serial # serial no file
+private_key = $dir/private/cakey.pem # CA private key
+RANDFILE = $dir/private/.rand # random number file
+
+default_days = 365 # how long to certify for
+default_crl_days= 30 # how long before next CRL
+default_md = md5 # md to use
+
+policy = ca_policy # our policy
+email_in_dn = no # Don't add the email into cert DN
+
+nameopt = default_ca # Subject name display option
+certopt = default_ca # Certificate display option
+copy_extensions = none # Don't copy extensions from request
+
+[ ca2 ]
+
+dir = ./ca2
+database = $dir/index.txt # index file.
+new_certs_dir = $dir/certs # new certs dir
+
+certificate = $dir/cacert.pem # The CA cert
+serial = $dir/serial # serial no file
+private_key = $dir/private/cakey.pem # CA private key
+RANDFILE = $dir/private/.rand # random number file
+
+default_days = 365 # how long to certify for
+default_crl_days= 30 # how long before next CRL
+default_md = md5 # md to use
+
+policy = ca_policy # our policy
+email_in_dn = no # Don't add the email into cert DN
+
+nameopt = default_ca # Subject name display option
+certopt = default_ca # Certificate display option
+copy_extensions = none # Don't copy extensions from request
+
+[ ca_policy ]
+
+organizationName = supplied
+commonName = supplied