mbedtls/programs/ssl/test-ca/sslconf.txt

##================================================================
##============== Example OpenSSL configuration file ==============
##================================================================

#  References:
#
#  /etc/ssl/openssl.conf
#  http://www.openssl.org/docs/apps/config.html
#  http://www.openssl.org/docs/apps/x509v3_config.html

[ ca ]
default_ca              = my_ca

[ my_ca ]
certificate             = test-ca.crt
private_key             = test-ca.key
database                = index
serial                  = serial

new_certs_dir           = newcerts
default_crl_days        = 5
default_days            = 3653
default_md              = sha1
policy                  = my_policy
x509_extensions         = v3_usr
copy_extensions         = copy

[ my_policy ]
countryName             = supplied
organizationName        = match
commonName              = supplied

[ req ]
distinguished_name      = my_req_dn
x509_extensions         = v3_ca
prompt			        = no

[ v3_ca ]
basicConstraints        = CA:TRUE
subjectKeyIdentifier    = hash
authorityKeyIdentifier  = keyid:always,issuer:always

[ v3_usr ]
basicConstraints        = CA:FALSE
subjectKeyIdentifier    = hash
authorityKeyIdentifier  = keyid,issuer

[ my_req_dn ]
C=NL
O=PolarSSL