diff -r 675a964f4eb5 -r 35751d3474b7 cryptoservices/certificateandkeymgmt/testcertificates/oldCA/openssl.config --- a/cryptoservices/certificateandkeymgmt/testcertificates/oldCA/openssl.config Tue Jul 21 01:04:32 2009 +0100 +++ b/cryptoservices/certificateandkeymgmt/testcertificates/oldCA/openssl.config Thu Sep 10 14:01:51 2009 +0300 @@ -1,209 +1,209 @@ -# openssl.config -# -# Config file for OpenSSL CA - -[ ca ] - -default_ca = ca_default # The default ca section - -[ Root1 ] - -dir = Root1 -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none # Don't copy extensions from request - -distinguished_name = root_ca_distinguished_name - - -[ Root2 ] - -dir = Root2 -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha1 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none # Don't copy extensions from request - - -[ Root5] - -dir = Root5 -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none # Don't copy extensions from request - - -[ Root5-Mid ] -dir = Root5-Mid -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\Mid-R5.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\Mid-R5.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none # Don't copy extensions from request - - - -[ Root3-OCSP ] - -dir = Root3-OCSP -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none # Don't copy extensions from request - - -[ Root1-OCSP ] - -dir = Root1-OCSP -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none - - -[ Root2-OCSP ] - -dir = Root2-OCSP -database = $dir\\index.txt # index file. -new_certs_dir = $dir\\certs # new certs dir - -certificate = $dir\\certs\\ca.pem # The CA cert -serial = $dir\\serial # serial no file -private_key = $dir\\private\\ca.key.pem # CA private key -RANDFILE = $dir\\private\\.rand # random number file - -default_days = 365 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = md5 # md to use - -policy = ca_policy # our policy -email_in_dn = no # Don't add the email into cert DN - -nameopt = default_ca # Subject name display option -certopt = default_ca # Certificate display option -copy_extensions = none - -[ Root5_Root_Ext ] -keyUsage=critical,keyCertSign -basicConstraints=critical,CA:TRUE, pathlen:5 -subjectKeyIdentifier=hash - -[ Root5_Ext ] -extendedKeyUsage=codeSigning -certificatePolicies=1.2.826.0.1.1796587.1 - -[ Root5_Mid ] -keyUsage=critical,keyCertSign -basicConstraints=critical,CA:TRUE, pathlen:5 -subjectKeyIdentifier=hash - -[ Root5_Mid_EE ] -extendedKeyUsage=codeSigning -certificatePolicies=1.2.826.0.1.1796587.1 -basicConstraints=critical,CA:FALSE - - -[ NoOCSP_Ext ] -1.3.6.1.5.5.7.48.1.5=DER:0500 - - -[ req ] -distinguished_name = root_ca_distinguished_name - -[ ca_policy ] - -organizationName = supplied -commonName = supplied - - -[ root_ca_distinguished_name ] - commonName = Symbian Software Ltd - stateOrProvinceName = London - countryName = UK - emailAddress = Jeremy.Smithers@Symbian.com - organizationName = Symbian Software Ltd +# openssl.config +# +# Config file for OpenSSL CA + +[ ca ] + +default_ca = ca_default # The default ca section + +[ Root1 ] + +dir = Root1 +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none # Don't copy extensions from request + +distinguished_name = root_ca_distinguished_name + + +[ Root2 ] + +dir = Root2 +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = sha1 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none # Don't copy extensions from request + + +[ Root5] + +dir = Root5 +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none # Don't copy extensions from request + + +[ Root5-Mid ] +dir = Root5-Mid +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\Mid-R5.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\Mid-R5.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none # Don't copy extensions from request + + + +[ Root3-OCSP ] + +dir = Root3-OCSP +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none # Don't copy extensions from request + + +[ Root1-OCSP ] + +dir = Root1-OCSP +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none + + +[ Root2-OCSP ] + +dir = Root2-OCSP +database = $dir\\index.txt # index file. +new_certs_dir = $dir\\certs # new certs dir + +certificate = $dir\\certs\\ca.pem # The CA cert +serial = $dir\\serial # serial no file +private_key = $dir\\private\\ca.key.pem # CA private key +RANDFILE = $dir\\private\\.rand # random number file + +default_days = 365 # how long to certify for +default_crl_days= 30 # how long before next CRL +default_md = md5 # md to use + +policy = ca_policy # our policy +email_in_dn = no # Don't add the email into cert DN + +nameopt = default_ca # Subject name display option +certopt = default_ca # Certificate display option +copy_extensions = none + +[ Root5_Root_Ext ] +keyUsage=critical,keyCertSign +basicConstraints=critical,CA:TRUE, pathlen:5 +subjectKeyIdentifier=hash + +[ Root5_Ext ] +extendedKeyUsage=codeSigning +certificatePolicies=1.2.826.0.1.1796587.1 + +[ Root5_Mid ] +keyUsage=critical,keyCertSign +basicConstraints=critical,CA:TRUE, pathlen:5 +subjectKeyIdentifier=hash + +[ Root5_Mid_EE ] +extendedKeyUsage=codeSigning +certificatePolicies=1.2.826.0.1.1796587.1 +basicConstraints=critical,CA:FALSE + + +[ NoOCSP_Ext ] +1.3.6.1.5.5.7.48.1.5=DER:0500 + + +[ req ] +distinguished_name = root_ca_distinguished_name + +[ ca_policy ] + +organizationName = supplied +commonName = supplied + + +[ root_ca_distinguished_name ] + commonName = Symbian Software Ltd + stateOrProvinceName = London + countryName = UK + emailAddress = Jeremy.Smithers@Symbian.com + organizationName = Symbian Software Ltd