diff options
Diffstat (limited to 'rpkid/resource-cert-samples/ISP3.cnf')
-rw-r--r-- | rpkid/resource-cert-samples/ISP3.cnf | 64 |
1 files changed, 64 insertions, 0 deletions
diff --git a/rpkid/resource-cert-samples/ISP3.cnf b/rpkid/resource-cert-samples/ISP3.cnf new file mode 100644 index 00000000..ded3be5d --- /dev/null +++ b/rpkid/resource-cert-samples/ISP3.cnf @@ -0,0 +1,64 @@ +# Automatically generated, do not edit. + +[ ca ] +default_ca = ca_default + +[ ca_default ] +certificate = ISP3.cer +serial = ISP3/serial +private_key = ISP3.key +database = ISP3/index +new_certs_dir = ISP3 +name_opt = ca_default +cert_opt = ca_default +default_days = 365 +default_crl_days = 30 +default_md = sha256 +preserve = no +copy_extensions = copy +policy = ca_policy_anything +unique_subject = no +x509_extensions = ca_x509_ext +crl_extensions = crl_x509_ext + +[ ca_policy_anything ] +countryName = optional +stateOrProvinceName = optional +localityName = optional +organizationName = optional +organizationalUnitName = optional +commonName = supplied +emailAddress = optional +givenName = optional +surname = optional + +[ req ] +default_bits = 2048 +encrypt_key = no +distinguished_name = req_dn +req_extensions = req_x509_ext +prompt = no + +[ req_dn ] +CN = TEST ENTITY ISP3 + +[ req_x509_ext ] +basicConstraints = critical,CA:true +subjectKeyIdentifier = hash +keyUsage = critical,keyCertSign,cRLSign +subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP3/ +authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR2.cer +#sbgp-autonomousSysNum = critical,??? +sbgp-ipAddrBlock = critical,IPv6:2001:db8::44-2001:db8::100 + +[ ca_x509_ext ] +basicConstraints = critical,CA:true +authorityKeyIdentifier = keyid:always +keyUsage = critical,keyCertSign,cRLSign +subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP3/ +authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR2.cer +#sbgp-autonomousSysNum = critical,??? +sbgp-ipAddrBlock = critical,IPv6:2001:db8::44-2001:db8::100 + +[ crl_x509_ext ] +authorityKeyIdentifier = keyid:always |