1SUBJECT_NAME = req_dn 2KEY_SIZE = 2048 3 4[req] 5default_bits = ${ENV::KEY_SIZE} 6default_md = sha256 7string_mask = utf8only 8prompt = no 9encrypt_key = no 10distinguished_name = ${ENV::SUBJECT_NAME} 11req_extensions = req_extensions 12 13[req_dn] 14C = US 15ST = California 16L = Mountain View 17O = Test CA 18CN = 127.0.0.1 19 20[req_no_san] 21basicConstraints = critical, CA:false 22 23[req_duplicate_cn_1] 24O = Foo 25CN = Duplicate 26 27[req_duplicate_cn_2] 28O = Bar 29CN = Duplicate 30 31[req_localhost_cn] 32C = US 33ST = California 34L = Mountain View 35O = Test CA 36CN = localhost 37 38[req_self_signed_a] 39C = US 40ST = Michigan 41L = Ann Arbor 42O = Test Self-Signed 43CN = SS A 44 45[req_self_signed_b] 46C = US 47ST = Michigan 48L = Ann Arbor 49O = Test Self-Signed 50CN = SS B 51 52[req_punycode_dn] 53CN = xn--wgv71a119e.com 54 55[req_ev_dn] 56C = US 57ST = California 58L = Mountain View 59O = Test Org 60 61[req_ev_state_only_dn] 62C = US 63ST = California 64O = Test Org 65 66[req_extensions] 67subjectAltName = IP:127.0.0.1 68 69[req_intranet_san] 70subjectAltName = DNS:webmail 71 72[req_extensions_with_can_sign_http_exchanges_draft] 73subjectAltName = IP:127.0.0.1 741.3.6.1.4.1.11129.2.1.22 = ASN1:NULL 75 76[req_extensions_with_can_sign_http_exchanges_draft_invalid] 77subjectAltName = IP:127.0.0.1 781.3.6.1.4.1.11129.2.1.22 = DER:30:00 79 80[req_localhost_san] 81subjectAltName = DNS:localhost 82 83[req_punycode] 84basicConstraints = critical, CA:true 85subjectAltName = @punycode_san 86 87[req_san_sanity] 88basicConstraints = critical, CA:true 89subjectAltName = @san_sanity 90 91[san_sanity] 92IP.1 = 127.0.0.2 93IP.2 = FE80::1 94DNS = test.example 95email = [email protected] 96otherName = 1.2.3.4;UTF8:ignore me 97dirName = more_san_sanity 98 99[req_san_example] 100basicConstraints = critical, CA:true 101subjectAltName = @san_example 102 103[san_example] 104DNS = www.example.com 105 106[req_policies_sanity] 107certificatePolicies=1.2.3.4.5, @policy1 108 109[policy1] 110policyIdentifier = 1.3.5.8.12 111CPS.1="http://cps.example.com/foo" 112userNotice.1=@policy_user_notice 113userNotice.2=@policy_user_notice2 114userNotice.3=@policy_user_notice3 115 116[policy_user_notice] 117explicitText="Explicit Text Here" 118organization="Organization Name" 119noticeNumbers=1,2,3,4 120 121[policy_user_notice2] 122explicitText="Explicit Text Two" 123 124[policy_user_notice3] 125organization="Organization Name Two" 126noticeNumbers=42 127 128[req_spdy_pooling] 129subjectAltName = @spdy_pooling 130 131[req_wildcard] 132subjectAltName = @wildcard 133 134[req_test_names] 135subjectAltName = @test_names 136 137[more_san_sanity] 138CN=127.0.0.3 139 140[spdy_pooling] 141DNS.1 = www.example.org 142DNS.2 = mail.example.org 143DNS.3 = mail.example.com 144DNS.4 = example.test 145 146[punycode_san] 147DNS.1 = xn--wgv71a119e.com 148DNS.2 = *.xn--wgv71a119e.com 149DNS.3 = blahblahblahblah.com 150 151[wildcard] 152DNS.1 = *.example.org 153 154[test_names] 155DNS.1 = a.test 156DNS.2 = *.a.test 157DNS.3 = b.test 158DNS.4 = *.b.test 159DNS.5 = c.test 160DNS.6 = *.c.test 161DNS.7 = d.test 162DNS.8 = *.d.test 163 164[subj_rsa_no_extension] 165CN = RSA-2048 no keyUsage extension 166[ext_rsa_no_extension] 167 168[subj_rsa_keyencipherment] 169CN = RSA-2048 keyEncipherment 170[ext_rsa_keyencipherment] 171keyUsage = critical, keyEncipherment 172 173[subj_rsa_digitalsignature] 174CN = RSA-2048 digitalSignature 175[ext_rsa_digitalsignature] 176keyUsage = critical, digitalSignature 177 178[subj_rsa_both] 179CN = RSA-2048 keyEncipherment and digitalSignature 180[ext_rsa_both] 181keyUsage = critical, keyEncipherment, digitalSignature 182 183[subj_p256_no_extension] 184CN = P-256 no keyUsage extension 185[ext_p256_no_extension] 186 187[subj_p256_keyagreement] 188CN = P-256 keyAgreement 189[ext_p256_keyagreement] 190keyUsage = critical, keyAgreement 191 192[subj_p256_digitalsignature] 193CN = P-256 digitalSignature 194[ext_p256_digitalsignature] 195keyUsage = critical, digitalSignature 196 197[subj_p256_both] 198CN = P-256 keyAgreement and digitalSignature 199[ext_p256_both] 200keyUsage = critical, keyAgreement, digitalSignature 201