1 |
--- openssl-0.9.8a/apps/openssl.cnf.defaults 2005-09-16 14:20:24.000000000 +0200 |
2 |
+++ openssl-0.9.8a/apps/openssl.cnf 2005-11-04 11:00:37.000000000 +0100 |
3 |
@@ -99,6 +99,7 @@ |
4 |
#################################################################### |
5 |
[ req ] |
6 |
default_bits = 1024 |
7 |
+default_md = sha1 |
8 |
default_keyfile = privkey.pem |
9 |
distinguished_name = req_distinguished_name |
10 |
attributes = req_attributes |
11 |
@@ -116,23 +117,26 @@ |
12 |
# MASK:XXXX a literal mask value. |
13 |
# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings |
14 |
# so use this option with caution! |
15 |
-string_mask = nombstr |
16 |
+# we use PrintableString+UTF8String mask so if pure ASCII texts are used |
17 |
+# the resulting certificates are compatible with Netscape |
18 |
+string_mask = MASK:0x2002 |
19 |
|
20 |
# req_extensions = v3_req # The extensions to add to a certificate request |
21 |
|
22 |
[ req_distinguished_name ] |
23 |
countryName = Country Name (2 letter code) |
24 |
-countryName_default = AU |
25 |
+countryName_default = GB |
26 |
countryName_min = 2 |
27 |
countryName_max = 2 |
28 |
|
29 |
stateOrProvinceName = State or Province Name (full name) |
30 |
-stateOrProvinceName_default = Some-State |
31 |
+stateOrProvinceName_default = Berkshire |
32 |
|
33 |
localityName = Locality Name (eg, city) |
34 |
+localityName_default = Newbury |
35 |
|
36 |
0.organizationName = Organization Name (eg, company) |
37 |
-0.organizationName_default = Internet Widgits Pty Ltd |
38 |
+0.organizationName_default = My Company Ltd |
39 |
|
40 |
# we can do this but it is not needed normally :-) |
41 |
#1.organizationName = Second Organization Name (eg, company) |
42 |
@@ -141,7 +145,7 @@ |
43 |
organizationalUnitName = Organizational Unit Name (eg, section) |
44 |
#organizationalUnitName_default = |
45 |
|
46 |
-commonName = Common Name (eg, YOUR name) |
47 |
+commonName = Common Name (eg, your name or your server\'s hostname) |
48 |
commonName_max = 64 |
49 |
|
50 |
emailAddress = Email Address |