| Samuli Silvius | f5534d8 | 2018-12-21 16:08:09 +0200 | [diff] [blame] | 1 | [ req ] |
| 2 | default_bits = 4096 |
| 3 | default_keyfile = server-key.pem |
| 4 | distinguished_name = dn |
| 5 | #req_extensions = v3_req |
| 6 | x509_extensions = v3_req |
| 7 | string_mask = utf8only |
| 8 | prompt = no |
| 9 | default_md = sha256 |
| 10 | |
| 11 | [ dn ] |
| 12 | |
| 13 | countryName = PL |
| 14 | localityName = Krakow |
| 15 | organizationName = Samsung |
| 16 | commonName = registry-1.docker.io |
| 17 | #emailAddress |
| 18 | |
| 19 | [ v3_req ] |
| 20 | |
| 21 | #subjectKeyIdentifier = hash |
| 22 | #authorityKeyIdentifier = keyid,issuer |
| 23 | |
| 24 | basicConstraints = CA:FALSE |
| 25 | keyUsage = critical, keyAgreement, nonRepudiation, digitalSignature, keyEncipherment |
| 26 | extendedKeyUsage = serverAuth |
| 27 | # does not work here because of bug in openssl |
| 28 | #subjectAltName = @alternate_names |
| 29 | nsComment = "OpenSSL Generated Certificate" |
| 30 | |
| 31 | #[ alternate_names ] |
| 32 | |
| 33 | #DNS.4 = ftp.example.com |