#
# self_signed_ca.conf
#
# - Configuration file for generating a self-signed root certificate.
#
# - Reference: John Viega (2002). Network security with OpenSSL. 
#              Sebastopol, CA: O'Reilly. ISBN: 059600270X.
# 

[req]
default_bits            = 2048
default_keyfile         = ./private/cakey.pem
default_md              = md5

prompt                  = no
distinguished_name      = root_ca_distinguished_name

x509_extensions         = root_ca_extensions

[root_ca_distinguished_name]
commonName              = Root CA
stateOrProvinceName     = Shatin
countryName             = HK
emailAddress            = ca@cse.cuhk.edu.hk
organizationName        = Root CA of CSE Dept, CUHK

[root_ca_extensions]
basicConstraints = CA:true