admin/demo2026-1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update openssl-gost.cnf

Browse Source
This commit is contained in:
shiraorie
2025-10-29 20:23:45 +01:00
parent 4c5eedabc5
commit 4c9bc8a775
1 changed files with 8 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
files/openssl-gost.cnf
View File

@@ -1,6 +1,3 @@
[ default ]
dir = /etc/pki/CA
[ ca ] [ ca ]
default_ca = CA_default default_ca = CA_default
@@ -16,7 +13,7 @@ RANDFILE = $dir/private/.rand
certificate = $dir/certs/ca.crt certificate = $dir/certs/ca.crt
private_key = $dir/private/ca.key private_key = $dir/private/ca.key
default_days = 30 default_days = 30
default_md = md_gost12_256 default_md = sha256
preserve = no preserve = no
policy = policy_anything policy = policy_anything
@@ -29,25 +26,14 @@ organizationalUnitName = optional
commonName = supplied commonName = supplied
emailAddress = optional emailAddress = optional
[ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
string_mask = utf8only
default_md = md_gost12_256
prompt = no
[ req_distinguished_name ]
CN = AU-Team Root CA
[ v3_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer
basicConstraints = critical, CA:true
keyUsage = critical, digitalSignature, cRLSign, keyCertSign
[ server_cert ] [ server_cert ]
basicConstraints = CA:FALSE basicConstraints = CA:FALSE
subjectKeyIdentifier = hash subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer authorityKeyIdentifier = keyid,issuer
keyUsage = critical, digitalSignature, keyEncipherment keyUsage = critical, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = web.au-team.irpo
DNS.2 = docker.au-team.irpo