Cfssl config.json example

config.json

{
  "address": "<public ip address>",
  "ca": "<ca-cert-path>",
  "ca-key": "<ca-key-path>",
  "tls-cert": "<tls-cert-path>",
  "tls-key": "<tls-key-path>",
  "responder": "<oscp-cert-path>",
  "responder-key": "<oscp-key-path>",
  "db-config": "/cfssl-config/db-config.json",
  "signing": {
    "default": {
      "auth_key": "key1",
      "expiry": "2160h"
    },
    "profiles": {
      "server": {
        "auth_key": "key1",
        "usages": [
          "signing",
          "key encipherment",
          "server auth"
        ],
        "expiry": "2160h"
      },
      "client": {
        "auth_key": "key1",
        "usages": [
          "signing",
          "key encipherment",
          "client auth"
        ],
        "expiry": "2160h"
      },
      "client-server": {
        "auth_key": "key1",
        "usages": [
          "signing",
          "key encipherment",
          "server auth",
          "client auth"
        ],
        "expiry": "2160h"
      }
    }
  },
  "auth_keys": {
    "key1": {
      "key": "<key removed>",
      "type": "standard"
    }
  }
}