etc/openssl/org/heureux-cyclage/openssl.conf

   1 # vim: ft=cfg
   2 [ req ]
   3         default_bits       = 4096
   4         default_md         = sha512
   5         distinguished_name = distinguished_name
   6         prompt             = no
   7         req_extensions     = extensions
   8         utf8               = yes
   9 [ distinguished_name ]
  10         countryName            = FR
  11         #stateOrProvinceName    =
  12         #localityName           =
  13         0.organizationName     = L’Heureux Cyclage
  14         organizationalUnitName = public
  15         commonName             = *.heureux-cyclage.org
  16                 # NOTE: wildcard certificate (more expen$ive)
  17 [ extensions ]
  18         basicConstraints       = critical,CA:FALSE
  19                 # NOTE: this is not a Certificate Authority,
  20                 #       but only a leaf certificate, and thus
  21                 #       does not allow user certificates.
  22         keyUsage               = keyEncipherment, keyAgreement
  23         subjectAltName         = email:admin@heureux-cyclage.org
  24         subjectKeyIdentifier   = hash