1[ ca ] 2default_ca = cca 3[ cca ] 4dir = . 5certs = /etc/lpd/ssl.ca 6crl_dir = /etc/lpd/ssl.crl 7new_certs_dir = /etc/lpd/ssl.certs 8certificate = /etc/lpd/ssl.ca/ca.crt 9private_key = /etc/lpd/ssl.ca/ca.crt 10database = ca.idx 11serialfile = ca.ser.dummy 12crl = /etc/lpd/ssl.crl/ssl.crl 13RANDFILE = /etc/lpd/ssl.ca/ca.rnd 14default_days = 365 15default_crl_days= 30 16default_md = md5 17preserve = yes 18policy = policy_anything 19crl_extensions = crl_ext 20[ policy_anything ] 21countryName = optional 22stateOrProvinceName = optional 23localityName = optional 24organizationName = optional 25organizationalUnitName = optional 26commonName = supplied 27emailAddress = optional 28[ crl_ext ] 29issuerAltName=issuer:copy 30