upgrade to CAM v2.0

[stack/cam.git] / cam / templates / ext_config

diff --git a/cam/templates/ext_config b/cam/templates/ext_config
new file mode 100644 (file)
index 0000000..8a193b5
--- /dev/null
+++ b/cam/templates/ext_config
@@ -0,0 +1,19 @@
+basicConstraints        = CA:false
+nsCertType              = client, server
+keyUsage                = nonRepudiation, digitalSignature, keyEncipherment
+extendedKeyUsage        = clientAuth, serverAuth
+nsComment               = "%(cn)s"
+subjectKeyIdentifier    = hash
+authorityKeyIdentifier  = keyid, issuer:always
+subjectAltName          = @subject_alt_name
+issuerAltName           = issuer:copy
+nsCaRevocationUrl       = %(crl_url)s
+nsRevocationUrl         = %(crl_url)s
+crlDistributionPoints   = @cdp_section
+
+[ subject_alt_name ]
+%(alt_names)s
+email = copy
+
+[ cdp_section ]
+URI.1 = %(crl_url)s