27 lines
560 B
INI
27 lines
560 B
INI
# This is the openssl config file for generating the CSR for the client.pem certificate
|
|
|
|
[ req ]
|
|
default_bits = 2048
|
|
default_keyfile = client.key
|
|
encrypt_key = no
|
|
default_md = sha256
|
|
prompt = no
|
|
utf8 = yes
|
|
distinguished_name = client_req_distinguished_name
|
|
req_extensions = client_extensions
|
|
|
|
[ client_req_distinguished_name ]
|
|
C = US
|
|
ST = New York
|
|
L = New York City
|
|
O = MongoDB
|
|
OU = KernelUser
|
|
CN = client
|
|
|
|
[ client_extensions ]
|
|
basicConstraints=CA:FALSE
|
|
subjectKeyIdentifier = hash
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
extendedKeyUsage = clientAuth
|
|
|