

[ ca ]
default_ca      = CA_default            # The default ca section

[ CA_default ]

dir            = ./         # top dir
database       = $dir/testnet_cert_index_db.txt        # index file.
new_certs_dir  = $dir/../        # new certs dir

#certificate    = $dir/testnetCA.pem       # The CA cert
certificate    = $dir/picapica_test_CA.pem
serial         = $dir/serial           # serial no file
#private_key    = $dir/privkey_testnetCA.pem # CA private key
private_key    = $dir/picapica_test_CA_pkey.pem # CA private key
RANDFILE       = /dev/urandom    # random number file

default_days   = 3685                   # how long to certify for
default_crl_days= 30                   # how long before next CRL
default_md     = sha1                   # md to use

policy         = policy_any            # default policy
email_in_dn    = no                    # Don't add the email into cert DN

name_opt       = ca_default            # Subject name display option
cert_opt       = ca_default            # Certificate display option
copy_extensions = none                 # Don't copy extensions from request

[ policy_any ]
countryName            = optional
stateOrProvinceName    = optional
organizationName       = optional
organizationalUnitName = optional
commonName             = supplied
emailAddress           = optional 
