Differences

This shows you the differences between two versions of the page.

--- software:openssl:createca [2025/10/19 03:49] – rodolico
+++ software:openssl:createca [2025/10/19 03:55] (current) – rodolico
@@ Line 121: / Line 121: @@
   * //-out// - name of the output file.
+==== Modify openssl.cnf ====
+<code conf>
+[ ca ]
+default_ca = CA_default
-Country Name (2 letter code) [AU]:US
+[ CA_default ]
-State or Province Name (full name) [Some-State]:Texas
+dir               = ./myCA              # Location of the CA certificate and private key
-Locality Name (eg, city) []:Dallas
+database          = $dir/myCAindex      # Database index file
-Organization Name (eg, company) [Internet Widgits Pty Ltd]:Daily Data
+new_certs_dir     = $dir/newcerts       # Directory where new certs are stored
-Organizational Unit Name (eg, section) []:Home Office
+certificate       = $dir/ca.crt         # The CA certificate
-Common Name (e.g. server FQDN or YOUR name) []:Rod
+private_key       = $dir/ca.key         # The CA private key
-Email Address []:joe@dailydata.net
+default_md        = sha256              # Default digest method
+preserve          = no                  # Keep existing certificates (yes/no)
+policy            = policy_any          # Default policy for issuing certificates
+[ policy_any ]
+countryName             = optional
+stateOrProvinceName     = optional
+organizationName        = optional
+organizationalUnitName  = optional
+commonName              = required
+emailAddress            = optional
+</code>