OPENSSL.CNF(5) File Formats Manual OPENSSL.CNF(5) libressl-openssl.cnf - LibreSSL (DESCRIPTION) CONF OpenSSL CONF_modules_load_file(3). OpenSSL /etc/ssl/openssl.cnf openssl(1) x509 . OpenSSL CONF . . [section_name] . (underscore) . " " . . ( ) . ENV . `#' . name=value . name `.' `,' `;' `_' . value `=' . . $name ${name}: . $section::name ${section::name} . $ENV::name, . ENV::name . CONF getenv(3) . 64k . `\' . `\' value . `\n', `\r', `\b' `\t' . OPENSSL (OPENSSL LIBRARY CONFIGURATION) OpenSSL OpenSSL . openssl(1) : OpenSSL . . openssl_conf openssl(1) . myapplication_conf . . . name . value : . : # The following line must be in the default section. openssl_conf = openssl_init [openssl_init] oid_section = new_oids [new_oids] ... new oids here ... . ASN1 (ASN1 Object Configuration Module) oid_section . OID : OID OID . openssl(1) ASN1 OBJECT . ASN1 OBJECT openssl(1) . : [new_oids] some_new_oid = 1.2.3.4 some_other_oid = 1.2.3.5 OID . : shortName = some object long name, 1.2.3.4 (FILES) /etc/ssl/openssl.cnf (EXAMPLES) : # This is the default section. HOME=/temp RANDFILE= ${ENV::HOME}/.rnd configdir=$ENV::HOME/config [ section_one ] # We are now in section one. # Quotes permit leading and trailing whitespace any = " any variable name " other = A string that can \ cover several lines \ by including \\ characters message = Hello World\n [ section_two ] greeting = $section_one::message . tmpfile . TEMP TMP . . TEMP /tmp : TMP=/tmp # The above value is used if TMP isn't in the environment TEMP=$ENV::TMP # The above value is used if TEMP isn't in the environment tmpfile=${ENV::TEMP}/tmp.filename OpenSSL. OID: # Default appname: should match "appname" parameter (if any) # supplied to CONF_modules_load_file et al. openssl_conf = openssl_conf_section [openssl_conf_section] # Configuration module list oid_section = new_oids [new_oids] # New OID, just short name newoid1 = 1.2.3.4.1 # New OID shortname and long name newoid2 = New OID 2 long name, 1.2.3.4.2 "openssl_conf" "appname" . "example.cnf" : OPENSSL_CONF=example.cnf openssl asn1parse -genstr OID:1.2.3.4.1 : 0:d=0 hl=2 l= 4 prim: OBJECT :newoid1 OID "newoid1" "1.2.3.4.1" . (SEE ALSO) openssl(1), CONF_modules_load_file(3), OPENSSL_config(3), x509v3.cnf(5) (CAVEATS) . . OpenSSL OpenSSL HOME . : . . (EXAMPLES) . . DN . `.' : 1.OU="My first OU" 2.OU="My Second OU" (BUGS) \nnn . NUL NUL . : `\n' . (single pass) . . Linux 6.12.107+deb13-amd64 July 8, 2024 Linux 6.12.107+deb13-amd64