1
    2
    3
    4
    5
    6
    7
    8
    9
   10
   11
   12
   13
   14
   15
   16
   17
   18
   19
   20
   21
   22
   23
   24
   25
   26
   27
   28
   29
   30
   31
   32
   33
   34
   35


content / test / data / sxg / google-com-ca.cnf [blame]

# This file is same as ca.cnf with the exception of subjectAltName field.
[ca]
default_ca = CA_root
preserve   = yes

[CA_root]
dir            = out
new_certs_dir  = $dir
database       = $dir/index.txt
serial         = $dir/serial
certificate    = ../../../../net/data/ssl/certificates/root_ca_cert.pem
private_key    = ../../../../net/data/ssl/certificates/root_ca_cert.pem
default_md     = sha256
unique_subject = no
policy         = policy_anything

[sxg_cert]
basicConstraints = CA:FALSE
# OID required for sxg since d54c469
1.3.6.1.4.1.11129.2.1.22 = ASN1:NULL
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer
subjectAltName=DNS:google-com.example.org

[policy_anything]
# Default signing policy
countryName            = optional
stateOrProvinceName    = optional
localityName           = optional
organizationName       = optional
organizationalUnitName = optional
commonName             = optional
emailAddress           = optional