save file

Author: javascript-2020

blog/25-09-29/name-constraints-in-x509-certificate/ex/config.txt

@@ -0,0 +1,19 @@
+[ req ]
+distinguished_name = req_distinguished_name
+x509_extensions = v3_ca
+prompt = no
+
+[ req_distinguished_name ]
+CN = My Test CA
+
+[ v3_ca ]
+basicConstraints = critical, CA:TRUE
+keyUsage = critical, keyCertSign, cRLSign
+subjectKeyIdentifier = hash
+nameConstraints = critical, @nc
+
+[ nc ]
+permitted;DNS.1 = .example.com
+permitted;DNS.2 = .internal.local
+excluded;DNS.1 = .malicious.com
+permitted;IP.1 = 192.168.0.0/255.255.0.0