1 [req] 2 default_bits = 2048 3 default_md = sha1 4 string_mask = utf8only 5 prompt = no 6 encrypt_key = no 7 distinguished_name = req_dn 8 9 [req_dn] 10 C = US 11 ST = California 12 L = Mountain View 13 O = Test CA 14 CN = 127.0.0.1 15 16 [crit-codeSigning] 17 subjectAltName = IP:127.0.0.1 18 basicConstraints = critical, CA:false 19 subjectKeyIdentifier = hash 20 extendedKeyUsage = critical, codeSigning 21 22 [non-crit-codeSigning] 23 subjectAltName = IP:127.0.0.1 24 basicConstraints = critical, CA:false 25 subjectKeyIdentifier = hash 26 extendedKeyUsage = codeSigning 27