/* vim:nowrap:noet:ts=8:ft=dosini
*/

#include "default.ini"

[ca]

#if 0
  oid_section			=
  oid_file			=
#endif

  dir				=$ca_DEFAULT::dir
  certs				=$dir
  new_certs_dir			=$dir
  crl_dir			=$dir

  database			=$dir/com.example_CAIndex.txt
  serial			=$dir/com.example_CASerial.txt
#if 0
  crlnumber			=$dir/com.example_CRLnumber.txt
#endif

  private_key			=$dir/com.example_CAPrivate_key.pem
  certificate			=$dir/com.example_CACertificate.pem
  crl				=$dir/com.example_CACertRevoked.pem 

  policy			=policy_DEFAULT_PRIVATE

  preserve			=$ca_DEFAULT::preserve
  email_in_dn			=$ca_DEFAULT::email_in_dn
  copy_extensions		=$ca_DEFAULT::copy_extensions
  unique_subject		=$ca_DEFAULT::unique_subject
  nameopt			=$ca_DEFAULT::nameopt
  certopt			=$ca_DEFAULT::certopt
  msie_hack			=$ca_DEFAULT::msie_hack

  extensions			=extensions_DEFAULT
  x509_extensions		=extensions_DEFAULT
#if 0
  crl_extensions		=crl_extensions_DEFAULT
#endif

  default_days			=$ca_DEFAULT::default_days
#if 0
  default_startdate		=$ca_DEFAULT::default_startdate
  default_enddate		=$ca_DEFAULT::default_enddate
#endif

  default_crl_days		=$ca_DEFAULT::default_days
#if 0
  default_crl_hours		=$ca_DEFAULT::default_hours
#endif

  default_md			=$ca_DEFAULT::default_md

[subjectAltName]
  IP				=74.50.53.135
  URI				=HTTP(WWW.example.com/)
  DNS.0				=Example Ltd.
  DNS.1				=*.example.com
  DNS.2				=SSL.example.com
  DNS.3				=WWW.example.com
  DNS.4				=POP3.example.com
  DNS.5				=SMTP.example.com
  email.0			=root@example.com
  email.1			=webmaster@example.com
#if 0 /* 'RFC822' not supported for certificate */
  RFC822.0			=root@example.com
  RFC822.1			=webmaster@example.com
#endif