24 lines
725 B
Plaintext
24 lines
725 B
Plaintext
# OpenSSL configuration for CRL generation
|
|
#
|
|
####################################################################
|
|
[ ca ]
|
|
default_ca= CA_default# The default ca section
|
|
|
|
####################################################################
|
|
[ CA_default ]
|
|
database = index.txt
|
|
crlnumber = crl_number
|
|
|
|
|
|
default_days= 365# how long to certify for
|
|
default_crl_days= 30# how long before next CRL
|
|
default_md= default# use public key default MD
|
|
preserve= no# keep passed DN ordering
|
|
|
|
####################################################################
|
|
[ crl_ext ]
|
|
# CRL extensions.
|
|
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
|
|
# issuerAltName=issuer:copy
|
|
authorityKeyIdentifier=keyid:always,issuer:always
|