-RANDFILE = %(basedir)s/.random
+RANDFILE = ${ENV::CAROOT}/.random
[ ca ]
default_ca = CA_default
[ CA_default ]
-dir = %(basedir)s
+dir = ${ENV::CAROOT}
certs = $dir/public/certs
crl_dir = $dir/public/crl
crl = $dir/public/crl.pem
organizationName = supplied
organizationalUnitName = optional
commonName = supplied
-emailAddress = supplied
+emailAddress = optional
[ policy_anything ]
countryName = optional
commonName = Common Name
commonName_max = 64
commonName_default = "%(cn)s"
-emailAddress = Email Address
-emailAddress_max = 60
-emailAddress_default = "%(email)s"
SET-ex3 = SET extension number 3
[ req_attributes ]
keyUsage = cRLSign, keyCertSign
nsCertType = sslCA, emailCA, objCA
nsComment = "%(cn)s"
-subjectAltName = email:copy
+subjectAltName = @ca_alt_name
issuerAltName = issuer:copy
+[ ca_alt_name ]
+email = "%(email)s"