Hitachi Web Server
######################################################################### # # sslc.cnf - RSA BSAFE SSL-C sample configuration file # ######################################################################### RANDFILE = "/Program Files/Hitachi/httpsd/sslc/.rnd" oid_file = "/Program Files/Hitachi/httpsd/sslc/.oid" #################################################################### [ ca ] default_ca = CA_default # The default ca section #################################################################### [ CA_default ] dir = "/Program Files/Hitachi/httpsd/sslc/bin/demoCA" # Location for everything certs = $dir/certs # Location of issued certs are kept crl_dir = $dir/crl # Location of issued crl are kept database = $dir/index.txt # database index file. new_certs_dir = $dir/newcerts # default place for new certs. certificate = $dir/cacert.pem # CA certificate serial = $dir/serial # Current serial number crl = $dir/crl.pem # Current CRL private_key = $dir/private/cakey.pem # Private key RANDFILE = $dir/private/.rand # Private random number file x509_extensions = x509v3_extensions # Extensions to add to the cert default_days = 365 # Duration to certify for default_crl_days = 30 # Time before next CRL default_md = md5 # Message digest to use. preserve = no # Keep passed DN ordering? # A few different ways of specifying how similar the request should look # For type CA, the listed attributes must be the same, and the optional # and supplied fields are just that policy = policy_anything # For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional #################################################################### [ req ] default_bits = 1024 default_keyfile = privkey.pem distinguished_name = req_distinguished_name attributes = req_attributes [ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = JP countryName_min = 2 countryName_max = 2 stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = Kanagawa localityName = Locality Name (eg, city) localityName_default = Yokohama-shi 0.organizationName = Organization Name (eg, company) 0.organizationName_default = organizationalUnitName = Organizational Unit Name (eg, section) organizationalUnitName_default = commonName = Common Name (eg, YOUR name) commonName_default = commonName_max = 256 emailAddress = Email Address emailAddress_default = www-admin@server.example.com emailAddress_max = 40 SET-ex3 = SET extension number 3 [ req_attributes ] challengePassword = A challenge password challengePassword_min = 4 challengePassword_max = 20 unstructuredName = An optional company name unstructuredName_default = [ x509v3_extensions ] nsComment = "Generated with RSA BSAFE SSL-C"
CSRの作成とテスト用サーバの証明書の発行に使用する主要なセクション,及びキーワードを次に示します。
表A-1 sslc.cnfのセクション,及びキーワード一覧
セクション名 | キーワード | 意味 |
---|---|---|
ca(caコマンド用) | default_ca | CA定義のセクション名 |
CA_default(default_caで指定したセクション名) | dir | 基準ディレクトリ |
database | インデクスファイル | |
new_certs_dir | 発行した証明書の格納場所 | |
serial | 証明書のシリアル番号 | |
policy | CAポリシーのセクション名 | |
policy_match又はpolicy_anything(policyで指定したセクション)※1 | countryName | 国名 |
StateOrProvinceName | 都道府県名 | |
localityName | 市町村名 | |
organizationName | 組織名 | |
organizationalUnitName | 組織部署名 | |
commonName | Webサーバ名 | |
emailAddress | Webサーバの管理者のE-Mailアドレス | |
req(reqコマンド用) | distinguished_name | 識別情報のセクション名 |
attributes | 属性のセクション名 | |
req_distinguished_name(distinguished_nameで指定したセクション)※2 | xxx(又は0.xxx) | 表示コメント |
xxx_default | デフォルト値 | |
xxx_min | 入力文字数の最小値 | |
xxx_max | 入力文字数の最大値 | |
req_attributes(attributesで指定したセクション)※3 | − | − |
All Rights Reserved. Copyright (C) 2006, 2007, Hitachi, Ltd.