[ ca ]
default_ca		= CA_default

[ CA_default ]
dir			= $ENV::OCSP_CA_DIR
database		= $dir/index.txt
new_certs_dir		= $dir/newcerts
serial			= $dir/serial
default_md		= sha256
default_days		= 2
policy			= policy_anything
email_in_dn		= no
unique_subject		= no
x509_extensions		= server_cert

[ policy_anything ]
commonName		= supplied

[ req ]
default_bits		= 2048
distinguished_name	= req_distinguished_name
prompt			= no

[ req_distinguished_name ]
# The subject is always given on the command line via -subj.

[ v3_ca ]
basicConstraints	= critical, CA:TRUE
keyUsage		= critical, digitalSignature, keyCertSign, cRLSign
subjectKeyIdentifier	= hash

[ server_cert ]
basicConstraints	= CA:FALSE
subjectAltName		= IP:127.0.0.1
authorityInfoAccess	= OCSP;URI:$ENV::OCSP_URI