xref: /openbsd/regress/sbin/iked/live/crt.in (revision 905646f0) 
1#	$OpenBSD: crt.in,v 1.2 2020/01/15 22:47:24 tobhe Exp $
2
3[ req ]
4default_bits            = 2048                  # default strength of client certificates
5default_md              = sha2
6encrypt_key             = yes                   # "no" is equivalent to -nodes
7prompt                  = no
8string_mask             = utf8only
9distinguished_name      = dn                    # root certificate name
10req_extensions          = req_cert_extensions
11
12[dn]
13C=DE
14ST=Bavaria
15L=Munich
16O=iked
17CN=${ENV::ALTNAME}
18
19[ req_cert_extensions ]
20subjectAltName          = @alt_names #;otherName = ${ENV::ALTNAME}-other
21
22[ alt_names ]
23DNS.1=${ENV::ALTNAME}
24DNS.2=${ENV::ALTNAME}-alternative
25email= ${ENV::ALTNAME}@openbsd.org
26