RANDOM=/dev/random

[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = v3_req
prompt = no

[ req_dn ]
O  = Debian-LAN LDAP server
OU = Automatically-generated LDAP SSL key

###
### run LDAP service on main server -> default
### make sure CN is also one of subjectAltName
###
CN = mainserver.intern
emailAddress = postmaster@mail.intern

[ v3_req ]
nsCertType = server
subjectAltName=DNS:mainserver.intern,DNS:mainserver,DNS:ldap.intern,DNS:ldap,DNS:localhost

###
### run LDAP service on a separate machine
### (server's IP must revresolv to ldap.intern)
###
#commonName=ldap.intern
#emailAddress=postmaster@mail.intern

#[ v3_req ]
#nsCertType = server
#subjectAltName=DNS:ldap.intern,DNS:ldap,DNS:localhost
