summaryrefslogtreecommitdiff
path: root/cpp/config/ice_ca.cnf
blob: 2477567c0dc9f1226c3abf4c8c1db815d41aacf5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# **********************************************************************
#
# Copyright (c) 2003-2017 ZeroC, Inc. All rights reserved.
#
# This copy of Ice is licensed to you under the terms described in the
# ICE_LICENSE file included in this distribution.
#
# **********************************************************************

#
# ZeroC base OpenSSL configuration file.
#

###############################################################################
###  Self Signed Root Certificate
###############################################################################

[ ca ]
default_ca = ice


[ ice ]
default_days     = 365     # How long certs are valid.
default_md       = md5     # The Message Digest type.
preserve         = no      # Keep passed DN ordering?


[ req ]
default_bits        = 2048
default_keyfile     = $ENV::ICE_HOME/certs/ca/cakey.pem
default_md          = md5
prompt              = no
distinguished_name  = root_ca_distinguished_name
x509_extensions     = root_ca_extensions


[ root_ca_distinguished_name ]
countryName            = US
stateOrProvinceName    = Some State
localityName           = Somewhere
organizationName       = Your Company
organizationalUnitName = Development
commonName             = Your Certificate Authority
emailAddress           = you@some.net


[ root_ca_extensions ]
basicConstraints = CA:true

# PKIX recommendation.
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always