2019-10-17 14:02:38 +00:00
|
|
|
req_extensions = v3_req
|
|
|
|
|
distinguished_name = req_distinguished_name
|
|
|
|
|
|
|
|
|
|
[req_distinguished_name]
|
|
|
|
|
|
|
|
|
|
[ v3_req ]
|
|
|
|
|
basicConstraints = CA:FALSE
|
|
|
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
|
|
|
|
|
|
|
|
[ ssl_client ]
|
|
|
|
|
extendedKeyUsage = clientAuth, serverAuth
|
|
|
|
|
basicConstraints = CA:FALSE
|
|
|
|
|
subjectKeyIdentifier=hash
|
|
|
|
|
authorityKeyIdentifier=keyid,issuer
|
|
|
|
|
|
|
|
|
|
[ v3_ca ]
|
|
|
|
|
basicConstraints = CA:TRUE
|
|
|
|
|
keyUsage = cRLSign, digitalSignature, keyCertSign
|
|
|
|
|
subjectKeyIdentifier=hash
|
|
|
|
|
authorityKeyIdentifier=keyid:always,issuer
|
2022-06-06 14:38:23 +00:00
|
|
|
|
|
|
|
|
[ ssl_client_apiserver ]
|
|
|
|
|
extendedKeyUsage = clientAuth, serverAuth
|
|
|
|
|
basicConstraints = CA:FALSE
|
|
|
|
|
subjectKeyIdentifier=hash
|
|
|
|
|
authorityKeyIdentifier=keyid,issuer
|
|
|
|
|
subjectAltName = DNS:calico-api.calico-apiserver.svc
|
