#
# OpenSSL Konfigurationsdatei (auf Linux umbenennen in openssl.cnf)
#

dir = .

[ ca ]
default_ca	= CA_default

[ CA_default ]
serial		= $dir/serial
database	= $dir/index.txt
new_certs_dir	= $dir/newcerts
certificate	= $dir/cacert.pem
private_key	= $dir/private/cakey.pem
default_days	= 365
default_md	= md5
preserve	= no
email_in_dn	= no
nameopt		= default_ca
certopt		= default_ca
policy		= policy_match

[ policy_match ]
countryName		= match
stateOrProvinceName	= match
organizationName	= match
organizationalUnitName	= optional
commonName		= supplied
emailAddress		= optional

[ req ]
default_bits 		= 1024		# size of keys
default_keyfile 	= key.pem	# name of genarted keys
default_md 		= md5		# message digest algorithm
string_mask 		= nombstr	# permitted characters
distinguished_name 	= req_distinguished_name
req_extensions		= v3_req


[ req_distinguished_name ]
# Variable name		  Prombt string
#---------------------	  --------------------
0.organizationName	= Organization Name 
organizationalUnitName	= Organizational Unit
emailAddress		= Email Address 
emailAddress_max	= 40
localityName		= Locality Name
stateOrProvinceName	= Province or State
countryName		= Country Name (2 letter code) 
countryName_min		= 2
countryName_max		= 2
commonName		= Common Name
commonName_max		= 64

# Default values for the above,	for the consistency and less typing.
# Variable name			Value
#-----------------------------	------------------------------------
0.organizationName_default	= Meine Firma
localityName_default		= Meine Stadt
stateOrProvinceName_default	= Mein Bundesland
countryName_default		= DE

[ v3_ca ]
basicConstraints	= CA:TRUE
subjectKeyIdentifier	= hash
authorityKeyIdentifier	= keyid:always,issuer:always

[ v3_req ]
basicConstraints	= CA:FALSE
subjectKeyIdentifier	= hash