etc

~ scripts and random things
git clone https://github.com/djnnvx/etc.git
ca.cnf (1258B)
      1 # Minimal offline mini-CA used only by gen_corpus.sh to mint realistic DER
      2 # seeds (cert / CRL / OCSP). Paths come from $ENV::CADIR set by the script.
      3 
      4 [ ca ]
      5 default_ca = CA_default
      6 
      7 [ CA_default ]
      8 dir              = $ENV::CADIR
      9 database         = $dir/index.txt
     10 new_certs_dir    = $dir/newcerts
     11 certificate      = $dir/ca.crt
     12 private_key      = $dir/ca.key
     13 serial           = $dir/serial
     14 crlnumber        = $dir/crlnumber
     15 default_md       = sha256
     16 default_days     = 365
     17 default_crl_days = 30
     18 policy           = policy_any
     19 x509_extensions  = leaf_exts
     20 copy_extensions  = none
     21 
     22 [ policy_any ]
     23 commonName = supplied
     24 
     25 # Rich extension set so the cert/CRL seeds exercise the extension parsers:
     26 # SAN (multiple GeneralName types), AIA (OCSP + caIssuers), CRL dist points,
     27 # key usage, EKU, SKI, AKI.
     28 [ leaf_exts ]
     29 basicConstraints       = CA:FALSE
     30 subjectAltName         = DNS:leaf.example, email:[email protected], URI:https://leaf.example/x
     31 keyUsage               = digitalSignature, keyEncipherment
     32 extendedKeyUsage       = serverAuth, clientAuth
     33 authorityInfoAccess    = OCSP;URI:http://ocsp.example/, caIssuers;URI:http://ca.example/ca.crt
     34 crlDistributionPoints  = URI:http://crl.example/a.crl
     35 subjectKeyIdentifier   = hash
     36 authorityKeyIdentifier = keyid,issuer