diff options
Diffstat (limited to 'config_files/certificate-authority/config/create_intermediate_csr.ini')
| -rw-r--r-- | config_files/certificate-authority/config/create_intermediate_csr.ini | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/config_files/certificate-authority/config/create_intermediate_csr.ini b/config_files/certificate-authority/config/create_intermediate_csr.ini new file mode 100644 index 0000000..1929141 --- /dev/null +++ b/config_files/certificate-authority/config/create_intermediate_csr.ini | |||
| @@ -0,0 +1,22 @@ | |||
| 1 | [ req ] | ||
| 2 | # Options for the `req` tool (`man req`). | ||
| 3 | default_bits = 4096 | ||
| 4 | distinguished_name = req_distinguished_name | ||
| 5 | string_mask = utf8only | ||
| 6 | prompt = no | ||
| 7 | |||
| 8 | # SHA-1 is deprecated, so use SHA-2 instead. | ||
| 9 | [ v3_ca ] | ||
| 10 | # Extensions for a typical CA (`man x509v3_config`). | ||
| 11 | subjectKeyIdentifier = hash | ||
| 12 | authorityKeyIdentifier = keyid:always,issuer | ||
| 13 | basicConstraints = critical, CA:true | ||
| 14 | keyUsage = critical, digitalSignature, cRLSign, keyCertSign | ||
| 15 | default_md = sha512 | ||
| 16 | |||
| 17 | [ req_distinguished_name ] | ||
| 18 | C = SG | ||
| 19 | ST = singapore | ||
| 20 | O = company name | ||
| 21 | OU = companyname Certificate Authority | ||
| 22 | CN = hi Intermediate CA | ||
