To create new wiki account, please join us on #znc at Libera.Chat and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

Template:Information and OpenSSL.cnf SelfSigned: Difference between pages

From ZNC
(Difference between pages)
Jump to navigation Jump to search
Gavin (talk | contribs)
35 edits
Created page with "<!-- Automatically detect protected files: --><includeonly>{{#switch: {{PROTECTIONLEVEL:upload}} |sysop|templateeditor|extendedconfirmed={{pp-upload|small=yes}} }}{{#swi..."
 
DoctorD90 (talk | contribs)
94 edits
Created page with " [default] default_md = sha512 name_opt = ca_default cert_opt = ca_default default_days = 375 policy = @policy_selfsigned [ re..."
 
Line 1: Line 1:
<!--
[default]
  Automatically detect protected files:
default_md        = sha512
--><includeonly>{{#switch: {{PROTECTIONLEVEL:upload}}
name_opt          = ca_default
  |sysop|templateeditor|extendedconfirmed={{pp-upload|small=yes}}
  cert_opt          = ca_default
  }}{{#switch: {{PROTECTIONLEVEL:move}}
  default_days      = 375
  |sysop|templateeditor|extendedconfirmed={{pp-move|small=yes}}
policy            = @policy_selfsigned
  }}{{#switch: {{PROTECTIONLEVEL:edit}}
  |sysop={{pp-protected|small=yes}}
[ req ]
  |templateeditor={{pp-template|small=yes}}
#Options from the [ req ] section are applied
  |extendedconfirmed={{Pp-30-500|small=yes}}
  #when creating certificates or certificate signing requests.
  |autoconfirmed={{pp-protected|small=yes}}
# Options for the `req` tool (`man req`).
  | <!--Not protected-->
default_bits        = 4096
  }}
distinguished_name  = req_selfsigned
</includeonly>{| summary="A standardized table providing complete information about the file, including description of what it shows and how it was made, copyright status and source." class="toccolours mbox-inside" style="width:100%;" cellpadding="2"
string_mask        = utf8only
! style="background:#ccf; text-align:right; vertical-align:top; padding-right: 0.4em; width:15%;" {{#if:{{{Description|{{{description|}}}}}}|id="fileinfotpl_desc"}} |Description
default_md          = sha512
| {{{Location|}}}
{{#if: {{{Description|{{{description|}}}}}}
| {{{Description|{{{description}}}}}}
[ req_selfsigned ]
| {{Description missing<noinclude>|category=</noinclude>}}
# The [ req_dn ] section declares the information
}}
# normally required in a certificate signing request.
|- style="vertical-align:top;"
# You can optionally specify some defaults.
! style="background:#ccf; text-align:right; padding-right:0.4em;" {{#if:{{{Source|{{{source|}}}}}}|id="fileinfotpl_src"}} | Source
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
|
countryName                    = Country Name (2 letter code)
{{#if:{{{Source|{{{source|}}}}}}
countryName_min                = 2
| {{{Source|{{{source}}}}}}
countryName_max                = 2
| {{#ifeq:{{NAMESPACE}}|File|<includeonly>[[Category:Wikipedia files with unknown source]]</includeonly>}} No source specified. Please edit this file description and [[Wikipedia:Citing sources#Multimedia|provide a source]].
stateOrProvinceName            = State or Province Name (full name)
}}
localityName                    = Locality Name (eg, city)
|- style="vertical-align:top;"
organizationName                = Organization Name (eg, company)
! style="background:#ccf; text-align:right; padding-right:0.4em; white-space:nowrap;" {{#if:{{{Date|{{{date|}}}}}}|id="fileinfotpl_date"}} | Date
organizationalUnitName          = Organizational Unit Name (eg, section)
|
commonName                      = Common Name (e.g. server FQDN or YOUR name)
{{{Date|{{{date|}}}}}}
emailAddress                    = Email Address
|- style="vertical-align:top;"
! style="background:#ccf; text-align:right; padding-right:0.4em;" {{#if:{{{Author|{{{author|}}}}}}|id="fileinfotpl_aut"}} | Author
# Optionally, specify some defaults.
|
countryName_default            = IT
{{#if: {{{Author|{{{author|}}}}}}
stateOrProvinceName_default    = Italy
| {{{Author|{{{author}}}}}}
localityName_default            = Italy
| {{Description missing|author information|category=}}{{#ifeq:{{NAMESPACE}}|File|<includeonly>[[Category:Files lacking an author]]</includeonly>}}
organizationName_default        = ZNC.in
}}
#organizationalUnitName_default  = ZNC Service
|- style="vertical-align:top;"
#commonName_default            = wiki.znc.in
! style="background:#ccf; text-align:right; padding-right:0.4em;" {{#if:{{{Permission|{{{permission|}}}}}}|id="fileinfotpl_perm"|}} | Permission<br /><small>([[Commons:Commons:Reusing content outside Wikimedia|Reusing this file]])</small>
emailAddress_default            = user [at] example [dot] com
|
{{#if:{{{Permission|{{{permission|}}}}}}
[ policy_selfsigned ]
| {{{Permission|{{{permission}}}}}}
# See the POLICY FORMAT section of the `ca` man page.
| See below.
countryName            = optional
}}
stateOrProvinceName    = optional
{{#switch: {{{Other_versions| {{{other_versions| {{{other versions|}}} }}} }}}
localityName            = optional
|  =  
organizationName        = optional
| - =  
organizationalUnitName  = optional
| none =  
commonName              = optional
| #default =  
emailAddress            = optional
<tr style="vertical-align:top;">
<th style="background:#ccf; text-align:right; padding-right:0.4em;" id="fileinfotpl_ver"> Other versions </th>
[ usr_cert ]
<td> {{{Other_versions| {{{other_versions| {{{other versions|}}} }}} }}} </td>
# We’ll apply the usr_cert extension when signing client certificates,
</tr>
# such as those used for remote user authentication.
}}
# Extensions for client certificates (`man x509v3_config`).
{{#switch: {{{Additional_information|{{{additional_information|{{{Additional information|{{{additional information|}}}}}}}}}}}}
basicConstraints = critical, CA:FALSE
|  =  
subjectKeyIdentifier = hash
| - =  
authorityKeyIdentifier = keyid:always, issuer:always
| none =  
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
| #default =  
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning
<tr style="vertical-align:top;">
<th style="background:#ccf; text-align:right; padding-right:0.4em;" id="fileinfotpl_add"> Additional information </th>
[ server_cert ]
<td> {{{Additional_information|{{{additional_information|{{{Additional information|{{{additional information|}}}}}}}}}}}} </td>
# We’ll apply the server_cert extension when signing server certificates,
</tr>
# such as those used for web servers.
}}
# Extensions for server certificates (`man x509v3_config`).
|}<noinclude>
basicConstraints = critical, CA:FALSE
 
subjectKeyIdentifier = hash
{{documentation}}
authorityKeyIdentifier = keyid:always, issuer:always
<!-- Add categories and interwikis to the /doc subpage, not here! -->
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
</noinclude>
extendedKeyUsage = critical, serverAuth

Revision as of 18:03, 23 August 2021

[default]
default_md        = sha512
name_opt          = ca_default
cert_opt          = ca_default
default_days      = 375
policy            = @policy_selfsigned

[ req ]
#Options from the [ req ] section are applied
#when creating certificates or certificate signing requests.
# Options for the `req` tool (`man req`).
default_bits        = 4096
distinguished_name  = req_selfsigned
string_mask         = utf8only
default_md          = sha512


[ req_selfsigned ]
# The [ req_dn ] section declares the information
# normally required in a certificate signing request.
# You can optionally specify some defaults.
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
countryName                     = Country Name (2 letter code)
countryName_min                 = 2
countryName_max                 = 2
stateOrProvinceName             = State or Province Name (full name)
localityName                    = Locality Name (eg, city)
organizationName                = Organization Name (eg, company)
organizationalUnitName          = Organizational Unit Name (eg, section)
commonName                      = Common Name (e.g. server FQDN or YOUR name)
emailAddress                    = Email Address

# Optionally, specify some defaults.
countryName_default             = IT
stateOrProvinceName_default     = Italy
localityName_default            = Italy
organizationName_default        = ZNC.in
#organizationalUnitName_default  = ZNC Service
#commonName_default             = wiki.znc.in
emailAddress_default            = user [at] example [dot] com

[ policy_selfsigned ]
# See the POLICY FORMAT section of the `ca` man page.
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = optional
emailAddress            = optional

[ usr_cert ]
# We’ll apply the usr_cert extension when signing client certificates,
# such as those used for remote user authentication.
# Extensions for client certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning

[ server_cert ]
# We’ll apply the server_cert extension when signing server certificates,
# such as those used for web servers.
# Extensions for server certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
extendedKeyUsage = critical, serverAuth
Retrieved from "https://wiki.znc.in/index.php?title=Template:Information&oldid=2929"