1234567891011121314151617181920212223 |
- # OpenSSL configuration for CRL generation
- #
- ####################################################################
- [ ca ]
- default_ca= CA_default# The default ca section
- ####################################################################
- [ CA_default ]
- database = index.txt
- crlnumber = crl_number
- default_days= 365# how long to certify for
- default_crl_days= 30# how long before next CRL
- default_md= default# use public key default MD
- preserve= no# keep passed DN ordering
- ####################################################################
- [ crl_ext ]
- # CRL extensions.
- # Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
- # issuerAltName=issuer:copy
- authorityKeyIdentifier=keyid:always,issuer:always
|