[ ca ]

default_ca = CA_default

[ CA_default ]

dir = .

database = $dir/index.txt

new_certs_dir = $dir/newcerts

certificate = $dir/SSSD_test_CA.pem

serial = $dir/serial

private_key = $dir/SSSD_test_CA_key.pem

RANDFILE = $dir/rand

default_days = 365

default_crl_days = 30

default_md = sha256

policy = policy_any

email_in_dn = no

name_opt = ca_default

cert_opt = ca_default

copy_extensions = copy

[ usr_cert ]

authorityKeyIdentifier = keyid, issuer

[ v3_ca ]

subjectKeyIdentifier = hash

authorityKeyIdentifier = keyid:always,issuer:always

basicConstraints = CA:true

keyUsage = critical, digitalSignature, cRLSign, keyCertSign

[ policy_any ]

organizationName = supplied

organizationalUnitName = supplied

commonName = supplied

emailAddress = optional

[ req ]

distinguished_name = req_distinguished_name

prompt = no

[ req_distinguished_name ]

O = SSSD

OU = SSSD test

CN = SSSD test CA