certs/openssl.cnf

   1 oid_section = new_oids
   2
   3 [ new_oids ]
   4
   5 # RFC 3920 section 5.1.1 defines this OID
   6 xmppAddr = 1.3.6.1.5.5.7.8.5
   7
   8 # RFC 4985 defines this OID
   9 SRVName  = 1.3.6.1.5.5.7.8.7
  10
  11 [ req ]
  12
  13 default_bits       = 4096
  14 default_keyfile    = example.com.key
  15 distinguished_name = distinguished_name
  16 req_extensions     = v3_extensions
  17 x509_extensions    = v3_extensions
  18
  19 # ask about the DN?
  20 prompt = no
  21
  22 [ distinguished_name ]
  23
  24 commonName             = example.com
  25 countryName            = GB
  26 localityName           = The Internet
  27 organizationName       = Your Organisation
  28 organizationalUnitName = XMPP Department
  29 emailAddress           = xmpp@example.com
  30
  31 [ v3_extensions ]
  32
  33 # for certificate requests (req_extensions)
  34 # and self-signed certificates (x509_extensions)
  35
  36 basicConstraints = CA:FALSE
  37 keyUsage         = digitalSignature,keyEncipherment
  38 extendedKeyUsage = serverAuth,clientAuth
  39 subjectAltName   = @subject_alternative_name
  40
  41 [ subject_alternative_name ]
  42
  43 # See http://tools.ietf.org/html/draft-ietf-xmpp-3920bis#section-13.7.1.2 for more info.
  44
  45 DNS.0       =                                           example.com
  46 otherName.0 =                 xmppAddr;FORMAT:UTF8,UTF8:example.com
  47 otherName.1 =            SRVName;IA5STRING:_xmpp-client.example.com
  48 otherName.2 =            SRVName;IA5STRING:_xmpp-server.example.com
  49
  50 DNS.1       =                                conference.example.com
  51 otherName.3 =      xmppAddr;FORMAT:UTF8,UTF8:conference.example.com
  52 otherName.4 = SRVName;IA5STRING:_xmpp-server.conference.example.com