snapdropCA.cnf (731B)
1 [ req ] 2 default_bits = 2048 3 default_md = sha256 4 default_days = 1 5 encrypt_key = no 6 distinguished_name = subject 7 x509_extensions = x509_ext 8 string_mask = utf8only 9 prompt = no 10 11 [ subject ] 12 organizationName = Snapdrop 13 OU = CA 14 commonName = snapdrop-CA 15 16 [ x509_ext ] 17 subjectKeyIdentifier = hash 18 authorityKeyIdentifier = keyid:always,issuer 19 20 # You only need digitalSignature below. *If* you don't allow 21 # RSA Key transport (i.e., you use ephemeral cipher suites), then 22 # omit keyEncipherment because that's key transport. 23 24 basicConstraints = critical, CA:TRUE, pathlen:0 25 keyUsage = critical, digitalSignature, keyEncipherment, cRLSign, keyCertSign 26