# This is mostly being used for generation of certificate requests.
#
-RANDFILE = ./.rnd
-
####################################################################
[ ca ]
default_ca = CA_default # The default ca section
serial = $dir/serial # The current serial number
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/CAkey.pem# The private key
-RANDFILE = $dir/private/.rand # private random number file
default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
####################################################################
[ req ]
-default_bits = 512
+default_bits = 2048
default_keyfile = testkey.pem
distinguished_name = req_distinguished_name
encrypt_rsa_key = no