# katello-server-openssl.cnf
#---------------------------------------------------------------------------
# Katello Management autogenerated openSSL configuration file.
#---------------------------------------------------------------------------
[ req ]
default_bits            = 4096
distinguished_name      = req_distinguished_name
prompt                  = no
x509_extensions         = req_server_x509_extensions
req_extensions          = v3_req

[ req_distinguished_name ]
C                       = US
ST                      = North Carolina
L                       = Raleigh
O                       = FOREMAN
OU                      = SMART_PROXY
CN                      = pipe-katello-server-nightly-centos7.tanso.example.com
#emailAddress            = ""


[ req_server_x509_extensions ]
basicConstraints = CA:false
keyUsage = digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth, clientAuth
nsCertType = server
# PKIX recommendations harmless if included in all certificates.
nsComment               = "Katello SSL Tool Generated Certificate, got it?"
subjectKeyIdentifier    = hash
authorityKeyIdentifier  = keyid, issuer:always

[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment

# Some CAs do not yet support subjectAltName in CSRs.
# Instead the additional names are form entries on web
# pages where one requests the certificate...
subjectAltName          = @alt_names

[alt_names]
DNS.1 = pipe-katello-server-nightly-centos7.tanso.example.com

#===========================================================================
