29 lines
902 B
Plaintext
29 lines
902 B
Plaintext
# Copyright (c) 2021 Battelle Energy Alliance, LLC. All rights reserved.
|
|
|
|
# one may wish to consider not using self-signed certificates in production
|
|
|
|
[req]
|
|
distinguished_name = req_distinguished_name
|
|
req_extensions = v3_req
|
|
prompt = no
|
|
|
|
[req_distinguished_name]
|
|
countryName = US
|
|
stateOrProvinceName = ID
|
|
organizationName = sensor
|
|
organizationalUnitName = beats
|
|
|
|
[ usr_cert ]
|
|
# Extensions for server certificates (`man x509v3_config`).
|
|
basicConstraints = CA:FALSE
|
|
nsCertType = client, server
|
|
nsComment = "OpenSSL Beats Server / Client Certificate"
|
|
subjectKeyIdentifier = hash
|
|
authorityKeyIdentifier = keyid,issuer:always
|
|
keyUsage = critical, digitalSignature, keyEncipherment, keyAgreement, nonRepudiation
|
|
extendedKeyUsage = serverAuth, clientAuth
|
|
|
|
[v3_req]
|
|
keyUsage = keyEncipherment, dataEncipherment
|
|
extendedKeyUsage = serverAuth, clientAuth
|