certs/localhost.cnf

   1 [v3_extensions]
   2 extendedKeyUsage = serverAuth,clientAuth
   3 keyUsage = digitalSignature,keyEncipherment
   4 basicConstraints = CA:FALSE
   5 subjectAltName = @subject_alternative_name
   6
   7 [subject_alternative_name]
   8 DNS.0 = localhost
   9 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost
  10 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost
  11 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost
  12
  13 [distinguished_name]
  14 countryName = GB
  15 organizationName = Prosody IM
  16 organizationalUnitName = https://prosody.im/doc/certificates
  17 commonName = Example certificate
  18
  19 [req]
  20 prompt = no
  21 x509_extensions = v3_extensions
  22 req_extensions = v3_extensions
  23 distinguished_name = distinguished_name
  24