SUBJECT_NAME = req_dn
KEY_SIZE = 2048

[req]
default_bits       = ${ENV::KEY_SIZE}
default_md         = sha256
string_mask        = utf8only
prompt             = no
encrypt_key        = no
distinguished_name = ${ENV::SUBJECT_NAME}
req_extensions     = req_extensions

[req_dn]
C  = US
ST = California
L  = Mountain View
O  = Test CA
CN = 127.0.0.1

[req_duplicate_cn_1]
O  = Foo
CN = Duplicate

[req_duplicate_cn_2]
O  = Bar
CN = Duplicate

[req_localhost_cn]
C  = US
ST = California
L  = Mountain View
O  = Test CA
CN = localhost

[req_punycode_dn]
CN = xn--wgv71a119e.com

[req_extensions]
subjectAltName = IP:127.0.0.1

[req_localhost_san]
subjectAltName = DNS:localhost

[req_punycode]
basicConstraints = critical, CA:true
subjectAltName   = @punycode_san

[req_san_sanity]
basicConstraints = critical, CA:true
subjectAltName   = @san_sanity

[san_sanity]
IP.1  = 127.0.0.2
IP.2  = FE80::1
DNS = test.example
email = test@test.example
otherName = 1.2.3.4;UTF8:ignore me
dirName = more_san_sanity

[req_spdy_pooling]
subjectAltName = @spdy_pooling

[req_wildcard]
subjectAltName = @wildcard

[more_san_sanity]
CN=127.0.0.3

[spdy_pooling]
DNS.1 = www.example.org
DNS.2 = mail.example.org
DNS.3 = mail.example.com

[punycode_san]
DNS.1 = xn--wgv71a119e.com
DNS.2 = *.xn--wgv71a119e.com
DNS.3 = blahblahblahblah.com

[wildcard]
DNS.1 = *.example.org