8a193b5f6c39a7c19d3271563654d13563779ef8
[stack/cam.git] / cam / templates / ext_config
1 basicConstraints        = CA:false
2 nsCertType              = client, server
3 keyUsage                = nonRepudiation, digitalSignature, keyEncipherment
4 extendedKeyUsage        = clientAuth, serverAuth
5 nsComment               = "%(cn)s"
6 subjectKeyIdentifier    = hash
7 authorityKeyIdentifier  = keyid, issuer:always
8 subjectAltName          = @subject_alt_name
9 issuerAltName           = issuer:copy
10 nsCaRevocationUrl       = %(crl_url)s
11 nsRevocationUrl         = %(crl_url)s
12 crlDistributionPoints   = @cdp_section
13
14 [ subject_alt_name ]
15 %(alt_names)s
16 email = copy
17
18 [ cdp_section ]
19 URI.1 = %(crl_url)s