1SUBJECT_NAME = req_dn 2KEY_SIZE = 2048 3 4[req] 5default_bits = ${ENV::KEY_SIZE} 6default_md = sha1 7string_mask = utf8only 8prompt = no 9encrypt_key = no 10distinguished_name = ${ENV::SUBJECT_NAME} 11req_extensions = req_extensions 12 13[req_dn] 14C = US 15ST = California 16L = Mountain View 17O = Test CA 18CN = 127.0.0.1 19 20[req_duplicate_cn_1] 21O = Foo 22CN = Duplicate 23 24[req_duplicate_cn_2] 25O = Bar 26CN = Duplicate 27 28[req_extensions] 29subjectAltName = IP:127.0.0.1 30 31[req_san_sanity] 32basicConstraints = critical, CA:true 33subjectAltName = @san_sanity 34 35[san_sanity] 36IP.1 = 127.0.0.2 37IP.2 = FE80::1 38DNS = test.example 39email = test@test.example 40otherName = 1.2.3.4;UTF8:ignore me 41dirName = more_san_sanity 42 43[req_spdy_pooling] 44subjectAltName = @spdy_pooling 45 46[more_san_sanity] 47CN=127.0.0.3 48 49[spdy_pooling] 50DNS.1 = www.example.org 51DNS.2 = mail.example.org 52DNS.3 = mail.example.com 53