https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Openssl_howto_two%2Fetc%2Fssl%2Fopenssl.cnf 2026-06-29T18:40:23Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=Openssl_howto_two/etc/ssl/openssl.cnf&diff=5669&oldid=prev 2014-11-03T15:09:01Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 3. November 2014, 15:09 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50" >Zeile 50:</td> <td colspan="2" class="diff-lineno">Zeile 50:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>default_keyfile        = privkey.pem</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>default_keyfile        = privkey.pem</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>distinguished_name      = req_distinguished_name</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>distinguished_name      = req_distinguished_name</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">      distinguished_name      = req_distinguished_name</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>attributes              = req_attributes</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>attributes              = req_attributes</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>x509_extensions = v3_ca # The extentions to add to the self signed cert</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>x509_extensions = v3_ca # The extentions to add to the self signed cert</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-5668:rev-5669 --> </table>

Thomas https://wiki.ixheim.de/index.php?title=Openssl_howto_two/etc/ssl/openssl.cnf&diff=5668&oldid=prev 2014-11-03T15:08:27Z

<p>Die Seite wurde neu angelegt: „&lt;pre&gt; HOME = . RANDFILE = $ENV::HOME/.rnd oid_section = new_oids [ new_oids ] tsa_policy1 = 1.2.3.4.1 tsa_policy2 = …“</p> <p><b>Neue Seite</b></p><div>&lt;pre&gt;<br /> HOME = .<br /> RANDFILE = $ENV::HOME/.rnd<br /> oid_section = new_oids<br /> [ new_oids ]<br /> tsa_policy1 = 1.2.3.4.1<br /> tsa_policy2 = 1.2.3.4.5.6<br /> tsa_policy3 = 1.2.3.4.5.7<br /> [ ca ]<br /> default_ca = CA_default # The default ca section<br /> [ CA_default ]<br /> dir = . # Where everything is kept<br /> certs = $dir/certs # Where the issued certs are kept<br /> crl_dir = $dir/crl # Where the issued crl are kept<br /> database = $dir/index.txt # database index file.<br /> # several ctificates with same subject.<br /> new_certs_dir = $dir/newcerts # default place for new certs.<br /> certificate = $dir/cacert.pem # The CA certificate<br /> serial = $dir/serial # The current serial number<br /> crlnumber = $dir/crlnumber # the current crl number<br /> # must be commented out to leave a V1 CRL<br /> crl = $dir/crl.pem # The current CRL<br /> private_key = $dir/private/cakey.pem# The private key<br /> RANDFILE = $dir/private/.rand # private random number file<br /> x509_extensions = usr_cert # The extentions to add to the cert<br /> name_opt = ca_default # Subject Name options<br /> cert_opt = ca_default # Certificate field options<br /> default_days = 3650 # how long to certify for<br /> default_crl_days= 30 # how long before next CRL<br /> default_md = default # use public key default MD<br /> preserve = no # keep passed DN ordering<br /> policy = policy_match<br /> [ policy_match ]<br /> countryName = match<br /> stateOrProvinceName = match<br /> organizationName = match<br /> organizationalUnitName = optional<br /> commonName = supplied<br /> emailAddress = optional<br /> [ policy_anything ]<br /> countryName = optional<br /> stateOrProvinceName = optional<br /> localityName = optional<br /> organizationName = optional<br /> organizationalUnitName = optional<br /> commonName = supplied<br /> emailAddress = optional<br /> [ req ]<br /> default_bits = 2048<br /> default_keyfile = privkey.pem<br /> distinguished_name = req_distinguished_name<br /> distinguished_name = req_distinguished_name<br /> attributes = req_attributes<br /> x509_extensions = v3_ca # The extentions to add to the self signed cert<br /> string_mask = utf8only<br /> [ req_distinguished_name ]<br /> countryName = Country Name (2 letter code)<br /> countryName_default = de<br /> countryName_min = 2<br /> countryName_max = 2<br /> stateOrProvinceName = State or Province Name (full name)<br /> stateOrProvinceName_default = rlp<br /> localityName = Locality Name (eg, city)<br /> localityName_default = zw<br /> 0.organizationName = Organization Name (eg, company)<br /> 0.organizationName_default = xinux<br /> organizationalUnitName = Organizational Unit Name (eg, section)<br /> organizationalUnitName_default = it<br /> commonName = Common Name (e.g. server FQDN or YOUR name)<br /> commonName_max = 64<br /> [ req_attributes ]<br /> [ usr_cert ]<br /> basicConstraints=CA:FALSE<br /> nsComment = &quot;OpenSSL Generated Certificate&quot;<br /> subjectKeyIdentifier=hash<br /> authorityKeyIdentifier=keyid,issuer<br /> [ v3_req ]<br /> basicConstraints = CA:FALSE<br /> keyUsage = nonRepudiation, digitalSignature, keyEncipherment<br /> [ v3_ca ]<br /> subjectKeyIdentifier=hash<br /> authorityKeyIdentifier=keyid:always,issuer<br /> basicConstraints = CA:true<br /> [ crl_ext ]<br /> authorityKeyIdentifier=keyid:always<br /> [ proxy_cert_ext ]<br /> basicConstraints=CA:FALSE<br /> nsComment = &quot;OpenSSL Generated Certificate&quot;<br /> subjectKeyIdentifier=hash<br /> authorityKeyIdentifier=keyid,issuer<br /> proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo<br /> [ tsa ]<br /> default_tsa = tsa_config1 # the default TSA section<br /> [ tsa_config1 ]<br /> dir = ./demoCA # TSA root directory<br /> serial = $dir/tsaserial # The current serial number (mandatory)<br /> crypto_device = builtin # OpenSSL engine to use for signing<br /> signer_cert = $dir/tsacert.pem # The TSA signing certificate<br /> # (optional)<br /> certs = $dir/cacert.pem # Certificate chain to include in reply<br /> # (optional)<br /> signer_key = $dir/private/tsakey.pem # The TSA private key (optional)<br /> default_policy = tsa_policy1 # Policy if request did not specify it<br /> # (optional)<br /> other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)<br /> digests = md5, sha1 # Acceptable message digests (mandatory)<br /> accuracy = secs:1, millisecs:500, microsecs:100 # (optional)<br /> clock_precision_digits = 0 # number of digits after dot. (optional)<br /> ordering = yes # Is ordering defined for timestamps?<br /> # (optional, default: no)<br /> tsa_name = yes # Must the TSA name be included in the reply?<br /> # (optional, default: no)<br /> ess_cert_id_chain = no # Must the ESS cert id chain be included?<br /> # (optional, default: no)</div>

Thomas