openssl.conf 617 B

123456789101112131415161718192021222324
  1. [req]
  2. distinguished_name = req_distinguished_name
  3. [req_distinguished_name]
  4. [ca]
  5. basicConstraints = critical, CA:true
  6. subjectKeyIdentifier = hash
  7. keyUsage = critical, cRLSign, keyCertSign
  8. [client]
  9. basicConstraints = critical, CA:FALSE
  10. subjectKeyIdentifier = hash
  11. authorityKeyIdentifier = keyid,issuer
  12. keyUsage = critical, digitalSignature, keyEncipherment
  13. extendedKeyUsage = clientAuth
  14. [server]
  15. basicConstraints = critical, CA:FALSE
  16. subjectKeyIdentifier = hash
  17. authorityKeyIdentifier = keyid,issuer
  18. keyUsage = critical, digitalSignature, keyEncipherment
  19. extendedKeyUsage = serverAuth
  20. subjectAltName = IP:127.0.0.1