Note: Netscape communicator chokes on V2 CRLs X509_extensions = usr_cert # The extentions to add to the cert RANDFILE = $dir/.rand # private random number file Private_key = $dir/ca.key # The private key Serial = $dir/serial # The current serial number New_certs_dir = $dir # default place for new certs.Ĭertificate = $dir/ca.crt # The CA certificate # Or use config file substitution like this:ĭefault_ca = CA_default # The default ca sectionĭir = $ENV::KEY_DIR # Where everything is keptĬerts = $dir # Where the issued certs are keptĬrl_dir = $dir # Where the issued crl are keptĭatabase = $dir/index.txt # database index file. # We can add new OIDs in here for use by 'ca' and 'req'.

# X.509v3 extensions in its main section.) # (Alternatively, use a configuration file that has only # «openssl x509» utility, name here the section containing the # To use this configuration file with the '-extfile' option of the # This definition stops the following lines choking if HOME isn't # This is mostly being used for generation of certificate requests.

Openvpn client download