Home Explore Help
Register Sign In
shixiong
/
okd
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 99745a0422
Branches Tags
okd
/
roles
/
etcd
/
templates
/
openssl_append.j2

openssl_append.j2 1.7 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051 
  1. 

  2. [ {{ etcd_req_ext }} ]
    3. 

  3. basicConstraints = critical,CA:FALSE
    4. 

  4. keyUsage         = digitalSignature,keyEncipherment
    5. 

  5. subjectAltName   = ${ENV::SAN}
    6. 

  6. 

  7. [ {{ etcd_ca_name }} ]
    8. 

  8. dir             = {{ etcd_ca_dir }}
    9. 

  9. crl_dir         = {{ etcd_ca_crl_dir }}
    10. 

  10. database        = {{ etcd_ca_db }}
    11. 

  11. new_certs_dir   = {{ etcd_ca_new_certs_dir }}
    12. 

  12. certificate     = {{ etcd_ca_cert }}
    13. 

  13. serial          = {{ etcd_ca_serial }}
    14. 

  14. private_key     = {{ etcd_ca_key }}
    15. 

  15. crl_number      = {{ etcd_ca_crl_number }}
    16. 

  16. x509_extensions = {{ etcd_ca_exts_client }}
    17. 

  17. default_days    = {{ etcd_ca_default_days }}
    18. 

  18. default_md      = sha256
    19. 

  19. preserve        = no
    20. 

  20. name_opt        = ca_default
    21. 

  21. cert_opt        = ca_default
    22. 

  22. policy          = policy_anything
    23. 

  23. unique_subject  = no
    24. 

  24. copy_extensions = copy
    25. 

  25. 

  26. [ {{ etcd_ca_exts_self }} ]
    27. 

  27. authorityKeyIdentifier = keyid,issuer
    28. 

  28. basicConstraints       = critical,CA:TRUE,pathlen:0
    29. 

  29. keyUsage               = critical,digitalSignature,keyEncipherment,keyCertSign
    30. 

  30. subjectKeyIdentifier   = hash
    31. 

  31. 

  32. [ {{ etcd_ca_exts_peer }} ]
    33. 

  33. authorityKeyIdentifier = keyid,issuer:always
    34. 

  34. basicConstraints       = critical,CA:FALSE
    35. 

  35. extendedKeyUsage       = clientAuth,serverAuth
    36. 

  36. keyUsage               = digitalSignature,keyEncipherment
    37. 

  37. subjectKeyIdentifier   = hash
    38. 

  38. 

  39. [ {{ etcd_ca_exts_server }} ]
    40. 

  40. authorityKeyIdentifier = keyid,issuer:always
    41. 

  41. basicConstraints       = critical,CA:FALSE
    42. 

  42. extendedKeyUsage       = serverAuth
    43. 

  43. keyUsage               = digitalSignature,keyEncipherment
    44. 

  44. subjectKeyIdentifier   = hash
    45. 

  45. 

  46. [ {{ etcd_ca_exts_client }} ]
    47. 

  47. authorityKeyIdentifier = keyid,issuer:always
    48. 

  48. basicConstraints       = critical,CA:FALSE
    49. 

  49. extendedKeyUsage       = clientAuth
    50. 

  50. keyUsage               = digitalSignature,keyEncipherment
    51. 

  51. subjectKeyIdentifier   = hash
    52.