diff options
| author | Stefan H. Holek <stefan@epy.co.at> | 2012-11-30 15:17:59 +0100 |
|---|---|---|
| committer | Erich Eckner <git@eckner.net> | 2019-09-02 12:03:10 +0200 |
| commit | a62d94b1ab1b4e8a5c27ab9b05463a849ed973f5 (patch) | |
| tree | 28a9a233f2a40fe8f1b92fd8876cccf2d8d20ac4 /etc/email-client.conf | |
| parent | 02572106d5b93bec4ff4325c52a5a4585aa07ed4 (diff) | |
| download | simple-pki-a62d94b1ab1b4e8a5c27ab9b05463a849ed973f5.tar.xz | |
Initial import.
Diffstat (limited to 'etc/email-client.conf')
| -rw-r--r-- | etc/email-client.conf | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/etc/email-client.conf b/etc/email-client.conf new file mode 100644 index 0000000..04fdaef --- /dev/null +++ b/etc/email-client.conf @@ -0,0 +1,31 @@ +# Email client certificate request + +# This file is used by the openssl req command. Since we cannot know the DN in +# advance the user is prompted for DN information. + +[ req ] +default_bits = 2048 # RSA key size +encrypt_key = yes # Protect private key +default_md = sha1 # MD to use +utf8 = yes # Input is UTF-8 +string_mask = utf8only # Emit UTF-8 strings +prompt = yes # Prompt for DN +distinguished_name = email_dn # DN template +req_extensions = email_reqext # Desired extensions + +[ email_dn ] +0.domainComponent = "1. Domain Component (eg, com) " +1.domainComponent = "2. Domain Component (eg, company) " +2.domainComponent = "3. Domain Component (eg, pki) " +organizationName = "4. Organization Name (eg, company) " +organizationalUnitName = "5. Organizational Unit Name (eg, section) " +commonName = "6. Common Name (eg, full name)" +commonName_max = 64 +emailAddress = "7. Email Address (eg, name@fqdn)" +emailAddress_max = 40 + +[ email_reqext ] +keyUsage = critical,digitalSignature,keyEncipherment +extendedKeyUsage = emailProtection,clientAuth +subjectKeyIdentifier = hash +subjectAltName = email:copy |