blob: ff3e4c46f2684f3e386cb2f03d82f5602899e056 [file] [log] [blame]
Gilles Peskinef040a172017-05-05 18:56:12 +02001[req]
2x509_extensions = v3_ca
3distinguished_name = req_dn
4
5[req_dn]
6countryName = NL
7organizationalUnitName = PolarSSL
8commonName = PolarSSL Test CA
9
10[v3_ca]
11subjectKeyIdentifier=hash
12authorityKeyIdentifier=keyid:always,issuer:always
13basicConstraints = CA:true
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +020014
Pengyu Lvfe500302023-05-25 09:24:17 +080015[no_subj_auth_id]
16subjectKeyIdentifier=none
17authorityKeyIdentifier=none
18basicConstraints = CA:true
19
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020020[othername_san]
21subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
22
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -030023[nonprintable_othername_san]
24subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
25
David Horstmannf3fee122022-11-25 15:50:30 +000026[unsupported_othername_san]
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020027subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
28
Ron Eldor9eeb8612019-02-12 15:03:42 +020029[dns_alt_names]
30subjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
31
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020032[alt_names]
33DNS.1=example.com
34otherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
35DNS.2=example.net
36DNS.3=*.example.org
37
38[multiple_san]
39subjectAltName=@alt_names
40
41[hw_module_name]
42hwtype = OID:1.3.6.1.4.1.17.3
43hwserial = OCT:123456
44
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -030045[nonprintable_hw_module_name]
46hwtype = OID:1.3.6.1.4.1.17.3
47hwserial = FORMAT:HEX, OCT:3132338081008180333231
48
Ron Eldor74d9acc2019-03-21 14:00:03 +020049[v3_any_policy_ca]
50basicConstraints = CA:true
51certificatePolicies = 2.5.29.32.0
52
53[v3_any_policy_qualifier_ca]
54basicConstraints = CA:true
55certificatePolicies = @policy_info
56
57[v3_multi_policy_ca]
58basicConstraints = CA:true
59certificatePolicies = 1.2.3.4,2.5.29.32.0
60
61[v3_unsupported_policy_ca]
62basicConstraints = CA:true
63certificatePolicies = 1.2.3.4
64
65[policy_info]
66policyIdentifier = 2.5.29.32.0
67CPS.1 ="CPS uri string"
68
Ron Eldor3c4734a2019-03-25 14:05:23 +020069[fan_cert]
70extendedKeyUsage = 1.3.6.1.4.1.45605.1
71
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +020072[noext_ca]
73basicConstraints = CA:true
Gilles Peskine15ad5792018-03-22 22:21:55 +010074
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +010075[test_ca]
76database = /dev/null
77
78[crl_ext_idp]
79issuingDistributionPoint=critical, @idpdata
80
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +010081[crl_ext_idp_nc]
82issuingDistributionPoint=@idpdata
83
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +010084[idpdata]
85fullname=URI:http://pki.example.com/
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +020086
87# these IPs are the ascii values for 'abcd' and 'abcd.example.com'
88[tricky_ip_san]
89subjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d