blob: f03f5fd3994e55d478b6503216fda2c5f7dd9f73 [file] [log] [blame]
Gilles Peskinef040a172017-05-05 18:56:12 +02001[req]
2x509_extensions = v3_ca
3distinguished_name = req_dn
4
5[req_dn]
6countryName = NL
7organizationalUnitName = PolarSSL
8commonName = PolarSSL Test CA
9
10[v3_ca]
11subjectKeyIdentifier=hash
12authorityKeyIdentifier=keyid:always,issuer:always
13basicConstraints = CA:true
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +020014
Pengyu Lvfe500302023-05-25 09:24:17 +080015[no_subj_auth_id]
16subjectKeyIdentifier=none
17authorityKeyIdentifier=none
18basicConstraints = CA:true
19
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020020[othername_san]
21subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
22
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -030023[nonprintable_othername_san]
24subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:nonprintable_hw_module_name
25
David Horstmannf3fee122022-11-25 15:50:30 +000026[unsupported_othername_san]
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020027subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
28
Ron Eldor9eeb8612019-02-12 15:03:42 +020029[dns_alt_names]
30subjectAltName=DNS:example.com, DNS:example.net, DNS:*.example.org
31
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020032[alt_names]
33DNS.1=example.com
34otherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
35DNS.2=example.net
36DNS.3=*.example.org
37
38[multiple_san]
39subjectAltName=@alt_names
40
Pengyu Lv5539dcb2023-05-18 10:10:39 +080041[ext_multi_nocn]
42basicConstraints = CA:false
43keyUsage = digitalSignature, nonRepudiation, keyEncipherment
44subjectAltName = DNS:www.shotokan-braunschweig.de,DNS:www.massimo-abate.eu,IP:192.168.1.1,IP:192.168.69.144
45
Ron Eldorb2dc3fa2019-03-21 13:40:13 +020046[hw_module_name]
47hwtype = OID:1.3.6.1.4.1.17.3
48hwserial = OCT:123456
49
Victor Barpp Gomes7e5426d2022-09-29 10:03:16 -030050[nonprintable_hw_module_name]
51hwtype = OID:1.3.6.1.4.1.17.3
52hwserial = FORMAT:HEX, OCT:3132338081008180333231
53
Ron Eldor74d9acc2019-03-21 14:00:03 +020054[v3_any_policy_ca]
55basicConstraints = CA:true
56certificatePolicies = 2.5.29.32.0
57
58[v3_any_policy_qualifier_ca]
59basicConstraints = CA:true
60certificatePolicies = @policy_info
61
62[v3_multi_policy_ca]
63basicConstraints = CA:true
64certificatePolicies = 1.2.3.4,2.5.29.32.0
65
66[v3_unsupported_policy_ca]
67basicConstraints = CA:true
68certificatePolicies = 1.2.3.4
69
70[policy_info]
71policyIdentifier = 2.5.29.32.0
72CPS.1 ="CPS uri string"
73
Ron Eldor3c4734a2019-03-25 14:05:23 +020074[fan_cert]
75extendedKeyUsage = 1.3.6.1.4.1.45605.1
76
Manuel Pégourié-Gonnardc10afdb2017-06-29 09:48:08 +020077[noext_ca]
78basicConstraints = CA:true
Gilles Peskine15ad5792018-03-22 22:21:55 +010079
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +010080[test_ca]
81database = /dev/null
82
83[crl_ext_idp]
84issuingDistributionPoint=critical, @idpdata
85
Manuel Pégourié-Gonnarda63305d2018-03-14 12:23:56 +010086[crl_ext_idp_nc]
87issuingDistributionPoint=@idpdata
88
Manuel Pégourié-Gonnardfd3e4fb2018-03-13 11:53:30 +010089[idpdata]
90fullname=URI:http://pki.example.com/
Manuel Pégourié-Gonnard7d2a4d82020-07-23 12:39:53 +020091
92# these IPs are the ascii values for 'abcd' and 'abcd.example.com'
93[tricky_ip_san]
94subjectAltName=IP:97.98.99.100,IP:6162:6364:2e65:7861:6d70:6c65:2e63:6f6d