[ req ]
default_bits           = 2048
encrypt_key            = yes
distinguished_name     = req_dn
prompt                 = no
x509_extensions        = v3_ca

[ req_dn ]
C                      = ch
O                      = DIRAC
OU                     = DIRAC CI
CN                     = DIRACDockerDevBox
emailAddress           = DIRACDockerDevBox@diracgrid.org

[ v3_ca ]
subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid:always
basicConstraints       = CA:true
