Rel4tion-Wiki/maint/admin/ca/service-template-example.mdwn

[[!format sh """
# X.509 Certificate options
#
# DN options

# The organization of the subject.
organization = "Love"

# The organizational unit of the subject.
unit = "Nature"

# The locality of the subject.
locality = "Earth"

# The state of the certificate owner.
state = "Plasma"

# The country of the subject. Two letter code.
country = IS

# The common name of the certificate owner.
cn = "Rel4tion"

# A user id of the certificate owner.
#uid = "rel4tion"

# The serial number of the certificate. Should be incremented each time a new
# certificate is generated, or comment the field for a time-based serial number.
#serial = 001

# In how many days, counting from today, this certificate will expire.
expiration_days = 730

# An email in case of a person
email = "fr33domlover@rel4tion.org"

# X.509 v3 extensions

# DNS name(s) of the server
dns_name = "mail.rel4tion.org"
dns_name = "mail.partager.null"

# (Optional) Server IP address
#ip_address = "14.285.714.28"

# Whether this certificate will be used for a TLS server
tls_www_server

# Whether this certificate will be used to sign data (needed
# in TLS DHE ciphersuites).
#signing_key

# Whether this certificate will be used to encrypt data (needed
# in TLS RSA ciphersuites). Note that it is preferred to use different
# keys for encryption and signing.
encryption_key
"""]]