1# An OpenSSL format CSR config file for creating a server certificate.
2#
3# This certificate contains both a CN, and SANs.
4
5
6[ req ]
7distinguished_name     = req_distinguished_name
8req_extensions         = v3_req
9prompt                 = no
10
11[ req_distinguished_name ]
12# Note: According to RFC 2818 and 6125, the CN is ignored, when SANs are
13# present. In practice, the hostname that's put in the CN field is always
14# also listed as a SAN, but we intentionally don't do that here so that we
15# can test adherence to those RFCs.
16CN = common-name.pg-ssltest.test
17OU = PostgreSQL test suite
18
19# For Subject Alternative Names
20[ v3_req ]
21subjectAltName = @alt_names
22
23[ alt_names ]
24DNS.1 = dns1.alt-name.pg-ssltest.test
25DNS.2 = dns2.alt-name.pg-ssltest.test
26