| [req] |
| distinguished_name = req_distinguished_name |
| attributes = req_attributes |
| |
| [req_distinguished_name] |
| |
| [req_attributes] |
| |
| [test_ca] |
| basicConstraints = critical,CA:TRUE |
| subjectKeyIdentifier = hash |
| authorityKeyIdentifier = keyid:always,issuer:always |
| keyUsage = critical,keyCertSign |
| |
| [test_server] |
| basicConstraints = critical,CA:FALSE |
| subjectKeyIdentifier = hash |
| keyUsage = critical,digitalSignature,keyEncipherment,keyAgreement |
| subjectAltName = @server_alt_names |
| |
| [server_alt_names] |
| DNS.1 = *.test.example.com |
| |
| [test_client] |
| basicConstraints = critical,CA:FALSE |
| subjectKeyIdentifier = hash |
| keyUsage = critical,nonRepudiation,digitalSignature,keyEncipherment |
| extendedKeyUsage = critical,clientAuth |
