X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=demo%2Fssl%2Fopenssl.cnf;h=62f76bac03e08b3b357bc6f5f882c079ddc9b7f1;hb=ad66cf060b0a32a3ff5cdd979a40fb5c918700fb;hp=45cfea08cd46cf8d2cccf17df05b36b0cf9a3406;hpb=8c273829d9bfa505e4c269a239c98491ab4e31e7;p=lgpl%2Fargeo-commons.git

diff --git a/demo/ssl/openssl.cnf b/demo/ssl/openssl.cnf
index 45cfea08c..62f76bac0 100644
--- a/demo/ssl/openssl.cnf
+++ b/demo/ssl/openssl.cnf
@@ -17,18 +17,18 @@ x509_extensions	= usr_cert		# The extentions to add to the cert
 name_opt 	= ca_default		# Subject Name options
 cert_opt 	= ca_default		# Certificate field options
 crl_extensions	= crl_ext
-default_days	= 3650			# how long to certify for
+default_days	= 365			# how long to certify for
 default_crl_days= 30			# how long before next CRL
 default_md	= default		# use public key default MD
 preserve	= no			# keep passed DN ordering
 policy		= policy_match
 
 [ policy_match ]
-countryName		= match
-stateOrProvinceName	= match
-organizationName	= match
+countryName		= optional
+stateOrProvinceName	= optional
+organizationName	= optional
 organizationalUnitName	= optional
-commonName		= supplied
+commonName		= optional
 emailAddress		= optional
 
 [ policy_anything ]
@@ -37,7 +37,7 @@ stateOrProvinceName	= optional
 localityName		= optional
 organizationName	= optional
 organizationalUnitName	= optional
-commonName		= supplied
+commonName		= optional
 emailAddress		= optional
 
 [ req ]
@@ -59,10 +59,10 @@ req_extensions = v3_req # The extensions to add to a certificate request
 countryName			= Country Name (2 letter code)
 countryName_min			= 2
 countryName_max			= 2
-stateOrProvinceName		= State or Province Name (full name)
+#stateOrProvinceName		= State or Province Name (full name)
 #localityName			= Locality Name (eg, city)
 0.organizationName		= Organization Name (eg, company)
-organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName		= Organizational Unit Name (eg, section)
 commonName			= Common Name (eg, your name or your server\'s hostname)
 commonName_max			= 64
 emailAddress			= Email Address
@@ -73,10 +73,11 @@ emailAddress_max		= 64
 ## DEFAULT VALUES
 ##
 countryName_default		= DE
-stateOrProvinceName_default	= Berlin
+#stateOrProvinceName_default	= Berlin
 #localityName_default	= Berlin
 0.organizationName_default	= Example
-organizationalUnitName_default	= People
+#organizationalUnitName_default	= Certificate Authorities
+commonName_default	= Certificate Authority
 
 [ req_attributes ]
 #challengePassword		= A challenge password
@@ -101,7 +102,7 @@ authorityKeyIdentifier=keyid:always,issuer
 basicConstraints = critical,CA:true
 # keyUsage = cRLSign, keyCertSign
 
-subjectAltName=email:copy
+#subjectAltName=email:copy
 issuerAltName=issuer:copy
 
 [ crl_ext ]