[ ca ]
default_ca = CA_default

[ CA_default ]
# Directory and file setup
dir               = .
certs             = $dir
new_certs_dir     = $dir
database          = $dir/index.txt
serial            = $dir/serial
crlnumber         = $dir/crlnumber

# The CA certificate and key
certificate       = $dir/MyPrivateCA.crt
private_key       = $dir/MyPrivateCA.key

# Policy and defaults
default_md        = sha256
name_opt          = ca_default
cert_opt          = ca_default
default_days      = 365
default_crl_days  = 3650
policy            = policy_loose

[ policy_loose ]
# Allow the CA to sign certificates with different details
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = supplied
emailAddress            = optional

[ crl_ext ]
# Extension for CRLs
authorityKeyIdentifier=keyid:always