39 lines
1.6 KiB
Python
39 lines
1.6 KiB
Python
|
TEST_CSR = """
|
||
|
# Configuration for standard CSR generation for Netflix
|
||
|
# Used for procuring VeriSign certificates
|
||
|
# Author: jachan
|
||
|
# Contact: cloudsecurity@netflix.com
|
||
|
|
||
|
[ req ]
|
||
|
# Use a 2048 bit private key
|
||
|
default_bits = 2048
|
||
|
default_keyfile = key.pem
|
||
|
prompt = no
|
||
|
encrypt_key = no
|
||
|
|
||
|
# base request
|
||
|
distinguished_name = req_distinguished_name
|
||
|
|
||
|
# extensions
|
||
|
# Uncomment the following line if you are requesting a SAN cert
|
||
|
{is_san_comment}req_extensions = req_ext
|
||
|
|
||
|
# distinguished_name
|
||
|
[ req_distinguished_name ]
|
||
|
countryName = "US" # C=
|
||
|
stateOrProvinceName = "CALIFORNIA" # ST=
|
||
|
localityName = "Los Gatos" # L=
|
||
|
organizationName = "Netflix, Inc." # O=
|
||
|
organizationalUnitName = "Operations" # OU=
|
||
|
# This is the hostname/subject name on the certificate
|
||
|
commonName = "{DNS[0]}" # CN=
|
||
|
|
||
|
[ req_ext ]
|
||
|
# Uncomment the following line if you are requesting a SAN cert
|
||
|
{is_san_comment}subjectAltName = @alt_names
|
||
|
|
||
|
[alt_names]
|
||
|
# Put your SANs here
|
||
|
{DNS_LINES}
|
||
|
"""
|