raddb/certs/server.cnf

   1 [ ca ]
   2 default_ca              = CA_default
   3
   4 [ CA_default ]
   5 dir                     = ./
   6 certs                   = $dir
   7 crl_dir                 = $dir/crl
   8 database                = $dir/index.txt
   9 new_certs_dir           = $dir
  10 certificate             = $dir/server.pem
  11 serial                  = $dir/serial
  12 crl                     = $dir/crl.pem
  13 private_key             = $dir/server.key
  14 RANDFILE                = $dir/.rand
  15 name_opt                = ca_default
  16 cert_opt                = ca_default
  17 default_days            = 365
  18 default_crl_days        = 30
  19 default_md              = md5
  20 preserve                = no
  21 policy                  = policy_match
  22
  23 [ policy_match ]
  24 countryName             = match
  25 stateOrProvinceName     = match
  26 organizationName        = match
  27 organizationalUnitName  = optional
  28 commonName              = supplied
  29 emailAddress            = optional
  30
  31 [ policy_anything ]
  32 countryName             = optional
  33 stateOrProvinceName     = optional
  34 localityName            = optional
  35 organizationName        = optional
  36 organizationalUnitName  = optional
  37 commonName              = supplied
  38 emailAddress            = optional
  39
  40 [ req ]
  41 prompt                  = no
  42 distinguished_name      = server
  43 default_bits            = 2048
  44 input_password          = whatever
  45 output_password         = whatever
  46
  47 [server]
  48 countryName             = FR
  49 stateOrProvinceName     = Radius
  50 localityName            = Somewhere
  51 organizationName        = Example Inc.
  52 emailAddress            = admin@example.com
  53 commonName              = "Example Server Certificate"
  54