2024-08-27 18:36:53 +08:00
|
|
|
[ req ]
|
|
|
|
|
default_bits = 2048
|
2020-10-10 01:03:18 +08:00
|
|
|
|
2024-08-27 18:36:53 +08:00
|
|
|
prompt = no
|
|
|
|
|
distinguished_name = req_distinguished_name
|
|
|
|
|
x509_extensions = v3_ca
|
|
|
|
|
v3_extensions = v3_ext
|
2020-10-10 01:03:18 +08:00
|
|
|
|
2024-08-27 18:36:53 +08:00
|
|
|
[ req_distinguished_name ]
|
|
|
|
|
countryName = CN
|
|
|
|
|
organizationName = NginxReverseProxy
|
|
|
|
|
commonName = Pixiv.net
|
2020-10-10 01:03:18 +08:00
|
|
|
|
2024-08-27 18:36:53 +08:00
|
|
|
[ v3_ext ]
|
|
|
|
|
keyUsage = keyCertSign,cRLSign
|
|
|
|
|
basicConstraints = critical,CA:true
|
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
|
authorityKeyIdentifier = keyid,issuer
|
|
|
|
|
|
|
|
|
|
[ v3_ca ]
|
|
|
|
|
basicConstraints = critical,CA:TRUE
|
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
|
authorityKeyIdentifier = keyid:always,issuer:always
|
|
|
|
|
|
|
|
|
|
[ v3_req ]
|
|
|
|
|
keyUsage = digitalSignature
|
|
|
|
|
extendedKeyUsage = "serverAuth,clientAuth"
|
|
|
|
|
basicConstraints = CA:TRUE
|
|
|
|
|
subjectAltName = @alternate_names
|
|
|
|
|
subjectKeyIdentifier = hash
|
