1[ req ] 2default_bits = 2048 3days = 9999 4distinguished_name = req_distinguished_name 5attributes = req_attributes 6prompt = no 7output_password = password 8x509_extensions = v3_ca 9 10[ req_distinguished_name ] 11C = CN 12O = CNNIC 13CN = CNNIC ROOT 14 15[ req_attributes ] 16challengePassword = A challenge password 17 18[ v3_ca ] 19basicConstraints = CA:TRUE 20