#
# custom openssl configuration file
# based on csr.sh from http://wiki.cacert.org/wiki/VhostTaskForce
#

[ req ]
default_bits            = 1024
default_keyfile         = /var/lib/misc/HOST_privatekey.pem
distinguished_name      = req_distinguished_name
prompt                  = no
default_days            = 3650
string_mask             = nombstr
req_extensions          = v3_req

[ req_distinguished_name ]
countryName                     = HR
#stateOrProvinceName             = 
#localityName                    = 
organizationName                = DOMAIN
#organizationalUnitName          = 
commonName                      = HOST
emailAddress                    = WEBMASTER

[ v3_req ]
subjectAltName=DNS:HOST,DNS:www.DOMAIN,DNS:mail.DOMAIN,DNS:ldap.DOMAIN,DNS:webmail.DOMAIN