Skip to content

Instantly share code, notes, and snippets.

@niedbalski
Created March 14, 2018 01:44
Show Gist options
  • Select an option

  • Save niedbalski/41eff01f6a786049badb3731f7fef3fc to your computer and use it in GitHub Desktop.

Select an option

Save niedbalski/41eff01f6a786049badb3731f7fef3fc to your computer and use it in GitHub Desktop.
# OpenSSL configuration for CRL generation
#
####################################################################
[ ca ]
default_ca = CA_default # The default ca section
####################################################################
[ CA_default ]
database = /config/auth/index.txt
crlnumber = /config/auth/crl_number
default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
default_md = default # use public key default MD
preserve = no # keep passed DN ordering
####################################################################
[ crl_ext ]
# CRL extensions.
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
# issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always,issuer:always
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment