173 lines
5.6 KiB
INI
173 lines
5.6 KiB
INI
[Version]
|
|
Signature= "$Windows NT$"
|
|
|
|
; ===========================================================
|
|
; Request Attributes
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[RequestAttributes]
|
|
AttributeName1 = AttributeValue1
|
|
AttributeName2 = AttributeValue2
|
|
|
|
; ===========================================================
|
|
; NameConstraintsExcluded Name Constraints Extension
|
|
; szOID_NAME_CONSTRAINTS 2.5.29.30
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[NameConstraintsExtension]
|
|
Include = NameConstraintsPermitted
|
|
Exclude = NameConstraintsExcluded
|
|
Critical = TrUe
|
|
|
|
[NameConstraintsPermitted]
|
|
; list of user defined permitted DNS names
|
|
; the numeric second and third arguments are optional
|
|
; when present, the second argument is the minimum depth
|
|
; when present, the third argument is the maximum depth
|
|
DNS = foo@domain.com
|
|
DNS = domain1.domain.com, 3, 6
|
|
|
|
[NameConstraintsExcluded]
|
|
; list of user defined excluded DNS names
|
|
DNS = domain.com
|
|
|
|
; ===========================================================
|
|
; Policy (CPS) Extension
|
|
; szOID_CERT_POLICIES 2.5.29.32
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[PolicyStatementExtension]
|
|
; list of user defined policies
|
|
Policies = LegalPolicy, LimitedUsePolicy, ExtraPolicy, OIDPolicy
|
|
CRITICAL = FALSE
|
|
|
|
[LegalPolicy]
|
|
; each policy has one OID, and zero or more Notice and URL keys
|
|
OID = 1.3.6.1.4.1.311.21.43
|
|
Notice = "Legal policy statement text"
|
|
|
|
[LimitedUsePolicy]
|
|
OID = 1.3.6.1.4.1.311.21.47
|
|
URL = "http://http.site.com/some where/default.asp"
|
|
URL = "ftp://ftp.site.com/some where else/default.asp"
|
|
Notice = "Limited use policy statement text."
|
|
URL = "ldap://ldap.site.com/some where else again/default.asp"
|
|
|
|
[ExtraPolicy]
|
|
OID = 1.3.6.1.4.1.311.21.53
|
|
URL = http://extra.site.com/Extra Policy/default.asp
|
|
|
|
[oidpolicy]
|
|
OID = 1.3.6.1.4.1.311.21.55
|
|
|
|
; ===========================================================
|
|
; Policy Mapping Extension
|
|
; szOID_POLICY_MAPPINGS 2.5.29.33
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[PolicyMappingsExtension]
|
|
; list of user defined policy mappings
|
|
; first OID is Issuer Domain Policy OID, second is Subject Domain Policy OID
|
|
; each entry maps one foreign policy OID to local
|
|
1.3.6.1.4.1.311.21.53 = 1.2.3.4.87
|
|
1.3.6.1.4.1.311.21.54 = 1.2.3.4.89
|
|
critical = -98
|
|
|
|
; ===========================================================
|
|
; Policy Constraints Extension
|
|
; szOID_POLICY_CONSTRAINTS 2.5.29.36
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[PolicyConstraintsExtension]
|
|
; consists of two optional DWORDs
|
|
; They refer to the depth of the CA hierarchy that requires explicit policy
|
|
; and inhibits Policy Mapping
|
|
RequireExplicitPolicy = 3
|
|
InhibitPolicyMapping = 5
|
|
|
|
; ===========================================================
|
|
; Application Policy (CPS) Extension
|
|
; szOID_APPLICATION_CERT_POLICIES 1.3.6.1.4.1.311.21.10
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[ApplicationPolicyStatementExtension]
|
|
; list of user defined policies
|
|
Policies = AppLegalPolicy, AppLimitedUsePolicy, AppExtraPolicy, AppOIDPolicy
|
|
CRITICAL = FALSE
|
|
|
|
[AppLegalPolicy]
|
|
; each policy has one OID, and zero or more Notice and URL keys
|
|
OID = 1.3.6.1.4.1.311.21.54
|
|
Notice = "Application Legal policy statement text"
|
|
|
|
[AppLimitedUsePolicy]
|
|
OID = 1.3.6.1.4.1.311.21.58
|
|
URL = "http://http.site.com/application some where/default.asp"
|
|
URL = "ftp://ftp.site.com/application some where else/default.asp"
|
|
Notice = "Application Limited use policy statement text."
|
|
URL = "ldap://ldap.site.com/application some where else again/default.asp"
|
|
|
|
[AppExtraPolicy]
|
|
OID = 1.3.6.1.4.1.311.21.64
|
|
URL = http://extra.site.com/Application Extra Policy/default.asp
|
|
|
|
[Appoidpolicy]
|
|
OID = 1.3.6.1.4.1.311.21.66
|
|
|
|
; ===========================================================
|
|
; Application Policy Mapping Extension
|
|
; szOID_APPLICATION_POLICY_MAPPINGS 1.3.6.1.4.1.311.21.11
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[ApplicationPolicyMappingsExtension]
|
|
; list of user defined application policy mappings
|
|
; first OID is Issuer Domain Policy OID, second is Subject Domain Policy OID
|
|
; each entry maps one foreign policy OID to local
|
|
1.3.6.1.4.1.311.21.64 = 1.2.3.4.98
|
|
1.3.6.1.4.1.311.21.65 = 1.2.3.4.100
|
|
critical = 2
|
|
|
|
; ===========================================================
|
|
; Application Policy Constraints Extension
|
|
; szOID_APPLICATION_POLICY_CONSTRAINTS 1.3.6.1.4.1.311.21.12
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[ApplicationPolicyConstraintsExtension]
|
|
; consists of two optional DWORDs
|
|
; They refer to the depth of the CA hierarchy that requires explicit policy
|
|
; and inhibits Policy Mapping
|
|
RequireExplicitPolicy = 6
|
|
InhibitPolicyMapping = 10
|
|
|
|
; ===========================================================
|
|
; Basic Constraints Extension
|
|
; szOID_BASIC_CONSTRAINTS2 2.5.29.19
|
|
; top level section
|
|
; ===========================================================
|
|
|
|
[BasicConstraintsExtension]
|
|
; Subject Type is not supported always set to CA
|
|
; maximum subordinate CA path length
|
|
PathLength = 3
|
|
|
|
[EnhancedKeyUsageExtension]
|
|
OID = 1.3.6.1.4.1.311.10.3.11 ; szOID_KP_KEY_RECOVERY
|
|
OID = 1.3.6.1.4.1.311.10.3.9 ; szOID_ROOT_LIST_SIGNER
|
|
OID = 1.3.6.1.4.1.311.10.3.1 ; szOID_KP_CTL_USAGE_SIGNING
|
|
CriticAL = trUe
|
|
|
|
[CRLValidity]
|
|
CRLPeriod = Days
|
|
CRLCount = 3
|
|
DeltaPeriod = Hours
|
|
DeltaCount = 6
|
|
|