golinks

shared/certs/motiejus-golinks-ca.cnf

@@ -0,0 +1,17 @@
+[req]
+distinguished_name = req_distinguished_name
+x509_extensions = v3_ca
+prompt = no
+
+[req_distinguished_name]
+CN = motiejus-golinks CA
+
+[v3_ca]
+basicConstraints = critical,CA:TRUE
+keyUsage = critical,keyCertSign,cRLSign
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always
+nameConstraints = critical,@name_constraints
+
+[name_constraints]
+permitted;DNS.1 = go.