diff --git a/ssl/openssl.cnf b/ssl/openssl.cnf index 57542ce2..b79a4653 100644 --- a/ssl/openssl.cnf +++ b/ssl/openssl.cnf @@ -39,20 +39,20 @@ default_ca = CA_default # The default ca section #################################################################### [ CA_default ] -dir = ./demoCA # Where everything is kept +dir = . # Where everything is kept certs = $dir/certs # Where the issued certs are kept crl_dir = $dir/crl # Where the issued crl are kept database = $dir/index.txt # database index file. #unique_subject = no # Set to 'no' to allow creation of # several ctificates with same subject. -new_certs_dir = $dir/newcerts # default place for new certs. +new_certs_dir = $dir # default place for new certs. -certificate = $dir/cacert.pem # The CA certificate +certificate = $dir/root-ca.crt # The CA certificate serial = $dir/serial # The current serial number crlnumber = $dir/crlnumber # the current crl number # must be commented out to leave a V1 CRL crl = $dir/crl.pem # The current CRL -private_key = $dir/private/cakey.pem# The private key +private_key = $dir/root-ca.key # The private key RANDFILE = $dir/private/.rand # private random number file x509_extensions = usr_cert # The extentions to add to the cert @@ -330,7 +330,7 @@ default_tsa = tsa_config1 # the default TSA section [ tsa_config1 ] # These are used by the TSA reply generation only. -dir = ./demoCA # TSA root directory +dir = . # TSA root directory serial = $dir/tsaserial # The current serial number (mandatory) crypto_device = builtin # OpenSSL engine to use for signing signer_cert = $dir/tsacert.pem # The TSA signing certificate