summaryrefslogtreecommitdiffstats
path: root/conf/CA/san.conf
blob: de9f62f9551b5fb4cddcfb4e2f1552ec4ce8d16e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# SAN Extension
# Copy, then add DNS.1 = name, etc
#
[ server_cert ]
# Extensions for server certificates (`man x509v3_config`).
basicConstraints = CA:FALSE
nsCertType = server, client
nsComment = "OpenSSL Generated Server Certificate"
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
keyUsage = critical, digitalSignature, keyEncipherment, nonRepudiation
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = @alt_names

[ alt_names ]