blob: e2dc5166a4e99f8073ad177ddf09b0e6608a6fad (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
# $Id$
[ req ]
default_md = sha256
default_bits = 2048
encrypt_key = no
distinguished_name = req_dn
x509_extensions = req_x509_ext
prompt = no
[ req_dn ]
C = US
ST = MA
L = Reading
O = Grunchweather Associates
OU = Software Engineering
CN = RFC3779 test cert
emailAddress = sra@hactrn.net
[ req_x509_ext ]
sbgp-autonomousSysNum = @asid_ext
sbgp-ipAddrBlock = @addr_ext
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://example.org/foo/,1.3.6.1.5.5.7.48.10;URI:rsync://example.org/foo/bar.mnf
#crlDistributionPoints = URI:rsync://example.org/foo/bar.crl
crlDistributionPoints = crldp_ext
certificatePolicies = critical, @certificate_policy_ext
[ crldp_ext ]
fullname = @crldp_URIs
[ crldp_URIs ]
URI.0 = rsync://example.org/foo/bar.crl
URI.1 = rsync://example.org/foo/baz.crl
[ certificate_policy_ext ]
policyIdentifier = 1.3.6.1.5.5.7.14.2
[ asid_ext ]
AS.0 = 1
AS.1 = 3-22
AS.2 = 2
RDI.0 = inherit
[ addr_ext ]
IPv4-SAFI.0 = 1 : 10.0.0.6 /24
IPv4.0 = 10.0.0.44
IPv4.1 = 10.3.0.44
IPv4.2 = 10.0.0.45
IPv4.3 = 10.2.0.5
IPv4.4 = 10.2.0.6- 10.3.0.0
IPv6.0 = 2002::
IPv6.1 = 2002::1 - 2002::14
IPv6.2 = 2003::/33
|
