jordanyaker · February 3, 2016 21:34 · Feb 3, 2016
diff --git a/openssl.conf b/openssl.conf
@@ -0,0 +1,31 @@
+[ ca ]
+default_ca = CA_default                 # The name of the CA configuration to be used. 
+                                        # can be anything that makes sense to you.
+[ CA_default ]
+dir = /etc/ssl/ca                       # Directory where everything is kept
+certs = $dir/certs                      # Directory where the issued certs are kept
+crl_dir = $dir/crl                      # Directory where the issued crl are kept
+database = $dir/index.txt               # database index file.
+#unique_subject = no                    # Set to 'no' to allow creation of
+                                        # several certificates with same subject.
+new_certs_dir = $dir/certs              # Default directory for new certs.
+
+certificate = $dir/ca.crt               # The CA certificate
+serial = $dir/serial                    # The current serial number
+crlnumber = $dir/crlnumber              # The current crl number
+                                        # must be commented out to leave a V1 CRL
+crl = $dir/crl.pem                      # The current CRL
+private_key = $dir/private/ca.key       # The private key
+RANDFILE    = $dir/private/.rand        # private random number file
+
+x509_extensions = usr_cert              # The extentions to add to the cert
+
+name_opt = ca_default                   # Subject Name options
+cert_opt = ca_default                   # Certificate field options
+
+default_days    = 365                   # how long to certify for
+default_crl_days= 30                    # how long before next CRL
+default_md    = sha1                    # use public key default MD
+preserve    = no                        # keep passed DN ordering
+
+policy = policy_match