#########################################################################
#
# sslc.cnf   - RSA BSAFE SSL-C sample configuration file
#
#########################################################################
 
RANDFILE             = "/Program Files/Hitachi/httpsd/sslc/.rnd"
oid_file             = "/Program Files/Hitachi/httpsd/sslc/.oid"
 
####################################################################
[ ca ]
default_ca  = CA_default               # The default ca section
 
####################################################################
[ CA_default ]
 
dir                  = "/Program Files/Hitachi/httpsd/sslc/bin/demoCA" # Location for everything
certs                = $dir/certs                 # Location of issued certs are kept
crl_dir              = $dir/crl                   # Location of issued crl are kept
database             = $dir/index.txt             # database index file.
new_certs_dir        = $dir/newcerts              # default place for new certs.
 
certificate          = $dir/cacert.pem            # CA certificate
serial               = $dir/serial                # Current serial number
crl                  = $dir/crl.pem               # Current CRL
private_key          = $dir/private/cakey.pem     # Private key
RANDFILE             = $dir/private/.rand         # Private random number file
 
x509_extensions      = x509v3_extensions          # Extensions to add to the cert
default_days         = 365                        # Duration to certify for
default_crl_days     = 30                         # Time before next CRL
default_md           = md5                        # Message digest to use.
preserve             = no                         # Keep passed DN ordering?
 
# A few different ways of specifying how similar the request should look
# For type CA, the listed attributes must be the same, and the optional
# and supplied fields are just that 
policy               = policy_anything
 
# For the CA policy
[ policy_match ]
countryName            = match
stateOrProvinceName    = match
organizationName       = match
organizationalUnitName = optional
commonName             = supplied
emailAddress           = optional
 
# For the 'anything' policy
# At this point in time, you must list all acceptable 'object'
# types.
[ policy_anything ]
countryName            = optional
stateOrProvinceName    = optional
localityName           = optional
organizationName       = optional
organizationalUnitName = optional
commonName             = supplied
emailAddress           = optional
 
####################################################################
[ req ]
default_bits           = 1024
default_keyfile        = privkey.pem
distinguished_name     = req_distinguished_name
attributes             = req_attributes
 
[ req_distinguished_name ]
countryName                    = Country Name (2 letter code)
countryName_default            = JP 
countryName_min                = 2
countryName_max                = 2
 
stateOrProvinceName            = State or Province Name (full name)
stateOrProvinceName_default    = Kanagawa 
 
localityName                   = Locality Name (eg, city)
localityName_default           = Yokohama-shi 
 
0.organizationName             = Organization Name (eg, company)
0.organizationName_default     = 
 
organizationalUnitName         = Organizational Unit Name (eg, section)
organizationalUnitName_default = 
 
commonName                     = Common Name (eg, YOUR name)
commonName_default             =
commonName_max                 = 256
 
emailAddress                   = Email Address
emailAddress_default           = www-admin@server.example.com
emailAddress_max               = 40
 
SET-ex3                        = SET extension number 3
 
[ req_attributes ]
challengePassword              = A challenge password
challengePassword_min          = 4
challengePassword_max          = 20
 
unstructuredName               = An optional company name
unstructuredName_default       = 
 
[ x509v3_extensions ]
 
nsComment                      = "Generated with RSA BSAFE SSL-C"

＜この項の構成＞

(1)　記述規則

(2)　セクション