mirror of
https://github.com/openbsd/src.git
synced 2025-01-10 06:47:55 -08:00
27 lines
887 B
INI
27 lines
887 B
INI
# default settings
|
|
CERTPATHLEN = 1
|
|
CERTUSAGE = digitalSignature,keyCertSign
|
|
CERTIP = 0.0.0.0
|
|
CERTFQDN = nohost.nodomain
|
|
|
|
# This section should be referenced when building an x509v3 CA
|
|
# Certificate.
|
|
# The default path length and the key usage can be overriden
|
|
# modified by setting the CERTPATHLEN and CERTUSAGE environment
|
|
# variables.
|
|
[x509v3_CA]
|
|
basicConstraints=critical,CA:true,pathlen:$ENV::CERTPATHLEN
|
|
keyUsage=$ENV::CERTUSAGE
|
|
|
|
# This section should be referenced to add an IP Address
|
|
# as an alternate subject name, needed by isakmpd
|
|
# The address must be provided in the CERTIP environment variable
|
|
[x509v3_IPAddr]
|
|
subjectAltName=IP:$ENV::CERTIP
|
|
|
|
# This section should be referenced to add a FQDN hostname
|
|
# as an alternate subject name, needed by isakmpd
|
|
# The address must be provided in the CERTFQDN environment variable
|
|
[x509v3_FQDN]
|
|
subjectAltName=DNS:$ENV::CERTFQDN
|