default_days = 365 # how long to certify for default_crl_days= 30 # how long before next CRL default_md = default # use public key default MD preserve = no # keep passed DN ordering # A few difference way of specifying how similar the request should look # For type CA, the listed...
default_bits=2048/*生成证书请求时用到的私钥的密钥长度*/default_md= sha1/*证书请求签名时的单向加密算法*/default_keyfile= privkey.pem/*默认新创建的私钥存放位置,*//*如-new选项没指定-key时会自动创建私钥*//*-newkey选项也会自动创建私钥*/distinguished_name= req_distinguished_name/*可识别的字段...
default_bits = 2048 default_keyfile = /var/MyCA/private/cakey.pem default_md = sha256 prompt = no distinguished_name = root_ca_distinguished_name x509_extensions = root_ca_extensions [ root_ca_distinguished_name ] commonName = My Test CA # 名称 stateOrProvinceName = BJ # 州或省代码 co...
default_ca = myca [ myca ] dir = /var/MyCA certificate = $dir/cacert.pem database = $dir/index.txt new_certs_dir = $dir/certs private_key = $dir/private/cakey.pem serial = $dir/serial default_crl_days = 7 default_days = 365 default_md = sha256 policy = myca_policy x509_exten...
default_md=default# usepublickeydefaultMD preserve=no # keep passed DN ordering # A few difference way of specifying how similar the request should look # For type CA, the listed attributes must be the same, and the optional # and supplied fields are just that :-) ...
7. default_startdate:意义同命令行的-startdate相同。如果没有的话那么就使用产生证书的时间。 8. default_enddate:意义同命令行的-enddate相同。(mandatory) 9. crl_extensions:preserve 10. default_crl_hours default_crl_days:CRL的东西...自己都没弄懂... 11. default_md:同命令行的-md意义相同. (...
default_bits = 2048 default_md = sha256 default_keyfile = privkey.pem distinguished_name = req_distinguished_name attributes = req_attributes # 添加自签名证书扩展 x509_extensions = v3_ca # The extentions to add to the self signed cert ...
[-engine id]options are-in<file>输入文件-out<file>输出文件-pass<arg>密码-e encrypt 加密操作-d decrypt 解密操作-a/-base64 base64 encode/decode,depending on encryption flag 是否将结果base64编码-k passphrase is the next argument-kfile passphrase is the first lineofthe file argument-md 指定...
pem default_md = sha256 prompt = no distinguished_name = root_ca_distinguished_name x509_extensions = root_ca_extensions [ root_ca_distinguished_name ] commonName = My Test CA # 名称 stateOrProvinceName = BJ # 州或省代码 countryName = CN # 国家代码 emailAddress = test@cert.com # ...
default_md 同命令行的-md意义相同.(mandatory) database 记得index.txt是什么文件吗?不记得自己往前找。这个key就是指定index.txt的。初始化是空文件。 serialfile 意义同-extensions相同。 意义同-msie_hack相同。 意义同-policy相同。自己看看这一块是怎么回事。(mandatory) ...