# This sets a mask for permitted string types. # Passwords for private keys if not present they will be prompted for X509_extensions = v3_ca # The extentions to add to the self signed cert # At this point in time, you must list all acceptable 'object'ĭistinguished_name = req_distinguished_name # For type CA, the listed attributes must be the same, and the optional # A few difference way of specifying how similar the request should look # so this is commented out by default to leave a V1 CRL.ĭefault_days = 3650 # how long to certify forĭefault_crl_days= 30 # how long before next CRL Note: Netscape communicator chokes on V2 CRLs X509_extensions = usr_cert # The extentions to add to the cert RANDFILE = $dir/.rand # private random number file

Private_key = $dir/ca.key # The private key Serial = $dir/serial # The current serial number New_certs_dir = $dir # default place for new certs.Ĭertificate = $dir/ca.crt # The CA certificate

# Or use config file substitution like this:ĭefault_ca = CA_default # The default ca sectionĭir = $ENV::KEY_DIR # Where everything is keptĬerts = $dir # Where the issued certs are keptĬrl_dir = $dir # Where the issued crl are keptĭatabase = $dir/index.txt # database index file. # We can add new OIDs in here for use by 'ca' and 'req'.

# X.509v3 extensions in its main section.) # (Alternatively, use a configuration file that has only # «openssl x509» utility, name here the section containing the # To use this configuration file with the '-extfile' option of the # This definition stops the following lines choking if HOME isn't # This is mostly being used for generation of certificate requests.

Openvpn-client for mac