| [ca] | |
| default_ca = CA_intermediate | |
| [CA_intermediate] | |
| dir = . | |
| certs = $dir/certs | |
| crl_dir = $dir/crl | |
| new_certs_dir = $dir/newcerts | |
| database = $dir/index.txt | |
| serial = $dir/serial | |
| RANDFILE = $dir/private/.rand | |
| private_key = $dir/intermediate_ca.key | |
| certificate = $dir/intermediate_ca.pem | |
| crl = $dir/intermediate.crl | |
| # For certificate revocation lists. | |
| crlnumber = $dir/crlnumber | |
| crl = $dir/crl/intermediate.crl | |
| crl_extensions = crl_ext | |
| default_crl_days = 3650 | |
| default_md = sha256 | |
| [req] | |
| distinguished_name = req_distinguished_name | |
| req_extensions = v3_req | |
| prompt = no | |
| [req_distinguished_name] | |
| CN = intermediatecert.example.com | |
| [crl_ext] | |
| authorityKeyIdentifier=keyid:always | |
| [v3_req] | |
| keyUsage = critical, digitalSignature, keyEncipherment, keyCertSign, cRLSign | |
| extendedKeyUsage = clientAuth, serverAuth | |
| basicConstraints = critical, CA:true |