# OpenSSL configuration for CRL generation
#
####################################################################
[ ca ]
default_ca= CA_default# The default ca section

####################################################################
[ CA_default ]
database = index.txt
crlnumber = crl_number


default_days= 365# how long to certify for
default_crl_days= 30# how long before next CRL
default_md= default# use public key default MD
preserve= no# keep passed DN ordering

####################################################################
[ crl_ext ]
# CRL extensions.
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
# issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always,issuer:always