apache-ops.cnf.in 941 Bytes
Newer Older
1 2 3 4 5 6
[ req ]
prompt                  = no
default_bits		= 1024
default_keyfile 	= privkey.pem
distinguished_name	= req_distinguished_name
x509_extensions	        = v3_ca	# The extentions to add to the self signed cert
7
req_extensions	        = v3_ca	# The extentions to add to the self signed cert
8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
encrypt_key		= no
string_mask             = nombstr

[ req_distinguished_name ]
C                      = @SSLCERT_COUNTRY@
ST                     = @SSLCERT_STATE@
L                      = @SSLCERT_LOCALITY@
O                      = @SSLCERT_ORGNAME@
OU                     = WebServer
# The apache server wants the CommonName (CN) to match what we set "ServerName"
# to in apache/http.conf.in (in the SSL section).
CN                     = @USERNODE@
emailAddress           = @TBOPSEMAIL@

[ v3_ca ]
subjectKeyIdentifier=hash
24 25 26 27 28 29
subjectAltName=@req_altname
basicConstraints = CA:false

[ req_altname ]
DNS.1 = ops.@OURDOMAIN@
DNS.2 = wiki.@OURDOMAIN@