Нема описа
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

openssl-server-certificate.cnf.j2 1.6KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566
  1. [ ca ]
  2. default_ca = CA_default
  3. [ CA_default ]
  4. dir = {{ openvpn_path }}
  5. certs = $dir
  6. crl_dir = $dir
  7. database = $dir/index.txt
  8. new_certs_dir = $dir
  9. certificate = {{ openvpn_ca }}.crt
  10. serial = $dir/serial
  11. crl = $dir/crl.pem
  12. private_key = {{ openvpn_ca }}.key
  13. RANDFILE = $dir/.rand
  14. x509_extensions = server
  15. default_days = {{ openvpn_days_valid }}
  16. default_crl_days= 30
  17. default_md = sha256
  18. preserve = no
  19. policy = policy_anything
  20. [ policy_anything ]
  21. countryName = optional
  22. stateOrProvinceName = optional
  23. localityName = optional
  24. organizationName = optional
  25. organizationalUnitName = optional
  26. commonName = supplied
  27. name = optional
  28. emailAddress = optional
  29. [ req ]
  30. distinguished_name = req_distinguished_name
  31. [ req_distinguished_name ]
  32. countryName = Country Name (2 letter code)
  33. countryName_default = {{ openvpn_key_country }}
  34. stateOrProvinceName = State or Province Name (full name)
  35. stateOrProvinceName_default = {{ openvpn_key_province }}
  36. localityName = Locality Name (eg, city)
  37. localityName_default = {{ openvpn_key_city }}
  38. 0.organizationName = Organization Name (eg, company)
  39. 0.organizationName_default = {{ openvpn_key_org }}
  40. organizationalUnitName = Organizational Unit Name (eg, section)
  41. organizationalUnitName_default = {{ openvpn_key_ou }}
  42. commonName = Common Name (eg, your name or your server\'s hostname)
  43. commonName_default = server
  44. [ server ]
  45. basicConstraints=CA:FALSE
  46. nsCertType = server
  47. nsComment = "Ansible Generated Server Certificate"
  48. subjectKeyIdentifier=hash
  49. authorityKeyIdentifier=keyid,issuer:always
  50. extendedKeyUsage=serverAuth
  51. keyUsage = digitalSignature, keyEncipherment