由于生成 CSR 时,已写入了v3_intermediate_ca字段中的信息。因此,我们在使用root_ca给其签发证书的时候,可以直接设置copy_extensions = copy,它表示root_ca签署时会直接拷贝 CSR 中的扩展信息,不做任何改变。 关于copy_extension 解释: Possible Values for copy_extensions: 1) copy_extensions = copy: Copies al...
# copy_extensions = copy # Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs # so this is commented out by default to leave a V1 CRL. # crlnumber must also be commented out to leave a V1 CRL. # crl_extensions = crl_ext default_days = 365 # how long t...
打开copy_extensions 在CA_default节 [ CA_default ] ... # Extension copying option: use with caution. copy_extensions = copy ... 打开req_extensions 在req节 [ req ] ... req_extensions = v3_req # The extensions to add to a certificate request ... 增加subjectAltName 在v3_req节 [ v3_r...
开启copy_extensions(默认是注释掉) 字段解释:是否将证书请求中的扩展项信息加入到证书扩展项中去。 取值范围以及解释: none: 忽略所有证书请求中的扩展项 (默认) copy: 将证书扩展项中没有的项目复制到证书中 copyall: 将所有证书请求中的扩展项都复制过去,并且覆盖证书扩展项中原来已经存在的值。 在copy_extensi...
openssl.cnf 文件内容: [req] default_bits = 2048 distinguished_name = req_distinguished_name copy_extensions = copy req_extensions = req_ext x509_extensions = v3_req prompt = no [req_distinguished_name] countryName = CN stateOrProvinceName = GuangDong ...
# copy_extensions = copy /* 生成证书时扩展项的copy行为,可设置为none/copy/copyall */ /* 不设置该name时默认为none */ /* 建议简单使用时设置为none或不设置,且强烈建议不要设置为copyall */ # crl_extensions = crl_ext default_days = 365 /* how long to certify for(默认的证书有效期) */...
*/cert_opt= ca_default/*Certificate field options*//*以下是copy_extensions扩展项,需谨慎使用*/# copy_extensions= copy/*生成证书时扩展项的copy行为,可设置为none/copy/copyall*//*不设置该name时默认为none*//*建议简单使用时设置为none或不设置,且强烈建议不要设置为copyall*/# crl_extensions=crl_...
# copy_extensions = copy # 吊销列表扩展 # Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs # so this is commented out by default to leave a V1 CRL. # crlnumber must also be commented out to leave a V1 CRL. ...
*/cert_opt= ca_default/*Certificate field options*//*以下是copy_extensions扩展项,需谨慎使用*/# copy_extensions= copy/*生成证书时扩展项的copy行为,可设置为none/copy/copyall*//*不设置该name时默认为none*//*建议简单使用时设置为none或不设置,且强烈建议不要设置为copyall*/# crl_extensions=crl_...
copy_extensions=none default_days=365default_crl_days=100default_md=sha256 policy=ca_policy[ca_policy]countryName=match stateOrProvinceName=optional organizationName=match organizationalUnitName=optional commonName=supplied emailAddress=optional[req]default_bits=4096encrypt_key=yes ...