cert.example.conf

#!/bin/bash

# OpenSSL Related Configuration
# -----------------------------------------------

# RSA or EC key ?
export KEY_TYPE="EC"

# select curve
export KEY_EC_CURVE="secp384r1"

# RSA keysize - recommended >= 3072
export KEY_SIZE=3072

# Your Cert Params
export KEY_COUNTRY="DE"
export KEY_PROVINCE="BERLIN"
export KEY_CITY="BERLIN"
export KEY_ORG="My Company"
export KEY_EMAIL="pki-test@yourdomain.tld"
export KEY_OU="OVPN-PKI Testing"

# x509 tool settings
# -----------------------------------------------

# In how many days should the root CA key expire?
CA_EXPIRE=3650

# In how many days should certificates expire?
CRT_EXPIRE=3650

# certificate naming scheme: generic (client.crt) or based on common name (<cn>.crt)
CRT_SCHEME="cn"

# Certificate Common Name Templates
# -----------------------------------------------

# The placeholder %s is replaced by the second CLI argument
CA_COMMON_NAME="%s"
ICA_COMMON_NAME="%s"
SRV_COMMON_NAME="%s"
CLIENT_COMMON_NAME="%s"
HOST_COMMON_NAME="%s"
CODESIGNING_COMMON_NAME="%s"
SMIME_COMMON_NAME="%s"
SMIME_EMAIL_NAME="%s"

# Development or user based installation
# -----------------------------------------------

# overrides
#CONF_DIR=${BASEDIR}
#LIB_DIR=${BASEDIR}/lib