/* vim:nowrap:noet:ts=8:ft=dosini
   updated: 040806
*/

#include "default.ini"

/*
  We have defaults for all values, but without prompting
  we get an ASN error, so bad news.
*/
#define PROMPT			0

[req]

  default_keyfile		=com.example.SSL_Private_key.pem

  default_bits			=$req_DEFAULT::default_bits
  default_md			=$req_DEFAULT::default_md
  encrypt_key			=$req_DEFAULT::encrypt_key
  utf8				=$req_DEFAULT::utf8

#if (PROMPT)
  prompt			=yes
#else
  prompt			=no
#endif

  req_extensions		=$req_DEFAULT::req_extensions
  x509_extensions		=$req_DEFAULT::x509_extensions

  distinguished_name		=distinguished_name
  attributes			=attributes

#if 0
  input_password		=secret
  output_password		=secret
#endif

  string_mask			=$req_DEFAULT::string_mask

[distinguished_name]

#if (PROMPT)
  countryName			=Country Name (2 letter code)
  countryName_default		=GB
  countryName_min		=2
  countryName_max		=2

  stateOrProvinceName		=State or Province Name (full name)
  stateOrProvinceName_default	=Oxfordshire

  localityName			=Locality Name (eg, city)
  localityName_default		=Oxford

  organizationName		=Organization Name (eg, company)
  organizationName_default	=Example Ltd.
  organizationalUnitName	=Organizational Unit Name (eg, section)
  organizationalUnitName_default=systems

  commonName			=Common Name 
  commonName_default		=SSL.example.com
  commonName_max		=64

  emailAddress			=Email Address
  emailAddress_default		=root@example.com
  emailAddress_max		=60

#if 0
  subjectAltName		=Subject Alt Name
  subjectAltName_default	=@subjectAltName
#endif
#else
#if 0
  C				=countryName
  ST				=stateOrProvinceName
  L				=localityName
  O				=organizationName
  OU				=organizationalUnitName
  CN				=Common Name
#else
  countryName			=GB
  stateOrProvinceName		=Oxfordshire
  localityName			=Oxford
  organizationName		=Example Ltd.
  organizationalUnitName	=systems
  commonName			=SSL.example.com
#endif

  emailAddress			=root@example.com

#if 0
  subjectAltName		=@subjectAltName
#endif
#endif

#if 0
  SET-ex3			=SET extension number 3
#endif

[attributes]
  /* Special attributes for a CSR certificate. */

#if (PROMPT)
  challengePassword		=A challenge password for the CA to ask
  challengePassword_min		=4
  challengePassword_max		=20

  unstructuredName		=An optional company name
#else
  unstructuredName		=com.example
#endif

[subjectAltName_CA]

[subjectAltName]