X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=etc%2Fopenssl%2Froundcube.chatperche.org%2Fhost.cfg;fp=etc%2Fopenssl%2Froundcube.chatperche.org%2Fhost.cfg;h=5c6a146d9ea80b4e39e58208d589bc44f75d8f35;hb=eb3908b9479ea0b6d26e46eb4220a5fc5f3536cb;hp=0000000000000000000000000000000000000000;hpb=c6f8b461f6ddd3dc786b640522fdc0e14b63c3cc;p=lhc%2Fateliers.git

diff --git a/etc/openssl/roundcube.chatperche.org/host.cfg b/etc/openssl/roundcube.chatperche.org/host.cfg
new file mode 100644
index 0000000..5c6a146
--- /dev/null
+++ b/etc/openssl/roundcube.chatperche.org/host.cfg
@@ -0,0 +1,70 @@
+	SERVICE     = roundcube
+	RANDFILE    = var/sec/x509/openssl.rand
+	oid_section = extra_oids
+[ extra_oids ]
+	# NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
+	jurisdictionOfIncorporationLocalityName        = 1.3.6.1.4.1.311.60.2.1.1
+	jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
+	jurisdictionOfIncorporationCountryName         = 1.3.6.1.4.1.311.60.2.1.3
+[ req ]
+	prompt             = no
+	distinguished_name = distinguished_name
+	string_mask        = pkix
+	#x509_extensions    = root_extensions
+	#req_extensions     = extension
+	#attributes         = req_attributes
+[ distinguished_name ]
+	countryName            = $ENV::x509_country
+	stateOrProvinceName    = $ENV::x509_state_or_province
+	localityName           = $ENV::x509_state_or_province
+	0.organizationName     = $ENV::x509_organization
+	organizationalUnitName = Service Roundcube
+	commonName             = $SERVICE.$ENV::x509_host
+	businessCategory                               = $ENV::x509_business_category
+	jurisdictionOfIncorporationLocalityName        = $ENV::x509_state_or_province
+	jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
+	jurisdictionOfIncorporationCountryName         = $ENV::x509_country
+[ extensions ]
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = keyEncipherment
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org,DNS:$SERVICE.ptitvelo.net,DNS:mail.ptitvelo.net,DNS:courriel.ptitvelo.net
+	subjectKeyIdentifier   = hash
+	issuerAltName          = issuer:copy
+	authorityKeyIdentifier = keyid:always,issuer:always
+	authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
+	crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+	certificatePolicies    = @certificate_policies
+[ self_signed_extensions ]
+	basicConstraints       = critical,CA:TRUE,pathlen:0
+	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org,DNS:$SERVICE.ptitvelo.net,DNS:mail.ptitvelo.net,DNS:courriel.ptitvelo.net
+	subjectKeyIdentifier   = hash
+	issuerAltName          = issuer:copy
+	authorityKeyIdentifier = keyid:always,issuer:always
+	authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+	crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+[ user_extensions ]
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = digitalSignature,keyEncipherment
+	subjectAltName         = email:$ENV::user@$ENV::x509_host
+	subjectKeyIdentifier   = hash
+	issuerAltName          = issuer:copy
+	authorityKeyIdentifier = keyid:always,issuer:always
+	authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+[ certificate_policies ]
+	policyIdentifier = 1.2.250.1.42
+	CPS.1            = https://www.$ENV::x509_host/x509/cps
+[ ca ]
+	private_key      = var/sec/x509/$ENV::x509/key.pem
+	dir              = var/pub/x509/$ENV::x509
+	crl_dir          = $dir
+	crlnumber        = $dir/crl.num
+	crl              = $dir/crl.pem
+	database         = $dir/idx.txt
+[ self_signed_ca ]
+	private_key      = var/sec/x509/$ENV::x509/key.pem
+	dir              = var/pub/x509/$ENV::x509
+	crl_dir          = $dir
+	crlnumber        = $dir/crl.self-signed.num
+	crl              = $dir/crl.self-signed.pem
+	database         = $dir/idx.self-signed.txt