snapdropCert.cnf (995B)
1 [ req ] 2 default_bits = 2048 3 default_md = sha256 4 default_days = 1 5 encrypt_key = no 6 distinguished_name = subject 7 req_extensions = req_ext 8 string_mask = utf8only 9 prompt = no 10 11 [ subject ] 12 organizationName = Snapdrop 13 OU = Development 14 15 # Use a friendly name here because it's presented to the user. The server's DNS 16 # names are placed in Subject Alternate Names. Plus, DNS names here is deprecated 17 # by both IETF and CA/Browser Forums. If you place a DNS name here, then you 18 # must include the DNS name in the SAN too (otherwise, Chrome and others that 19 # strictly follow the CA/Browser Baseline Requirements will fail). 20 21 commonName = ${ENV::FQDN} 22 23 [ req_ext ] 24 subjectKeyIdentifier = hash 25 basicConstraints = CA:FALSE 26 keyUsage = digitalSignature, keyEncipherment 27 subjectAltName = DNS:${ENV::FQDN} 28 nsComment = "OpenSSL Generated Certificate" 29 extendedKeyUsage = serverAuth