Deprecated: The each() function is deprecated. This message will be suppressed on further calls in /home/zhenxiangba/zhenxiangba.com/public_html/phproxy-improved-master/index.php on line 456
--- openssl.cnf.org 2016-02-24 23:45:46.000000000 +0900
+++ openssl.cnf 2016-03-19 21:57:59.000000000 +0900
@@ -70,9 +70,9 @@
# crlnumber must also be commented out to leave a V1 CRL.
# crl_extensions = crl_ext
-default_days = 365 # how long to certify for
+default_days = 3650 # how long to certify for
default_crl_days= 30 # how long before next CRL
-default_md = default # use public key default MD
+default_md = sha256 # use public key default MD
preserve = no # keep passed DN ordering
# A few difference way of specifying how similar the request should look
@@ -85,7 +85,7 @@
countryName = match
stateOrProvinceName = match
organizationName = match
-organizationalUnitName = optional
+organizationalUnitName = supplied
commonName = supplied
emailAddress = optional
@@ -104,7 +104,7 @@
####################################################################
[ req ]
default_bits = 2048
-default_md = sha1
+default_md = sha256
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
@@ -127,25 +127,25 @@
[ req_distinguished_name ]
countryName = Country Name (2 letter code)
-countryName_default = XX
+countryName_default = JP
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
-#stateOrProvinceName_default = Default Province
+stateOrProvinceName_default = Aichi
localityName = Locality Name (eg, city)
-localityName_default = Default City
+localityName_default = Nagoya
0.organizationName = Organization Name (eg, company)
-0.organizationName_default = Default Company Ltd
+0.organizationName_default = Hoge Net
# we can do this but it is not needed normally :-)
#1.organizationName = Second Organization Name (eg, company)
#1.organizationName_default = World Wide Web Pty Ltd
organizationalUnitName = Organizational Unit Name (eg, section)
-#organizationalUnitName_default =
+organizationalUnitName_default = Information Tech
commonName = Common Name (eg, your name or your server\'s hostname)
commonName_max = 64
@@ -187,7 +187,7 @@
# nsCertType = client, email, objsign
# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
# This will be displayed in Netscape's comment listbox.
nsComment = "OpenSSL Generated Certificate"
@@ -244,7 +244,7 @@
# Key usage: this is typical for a CA certificate. However since it will
# prevent it being used as an test self-signed certificate it is best
# left out by default.
-# keyUsage = cRLSign, keyCertSign
+keyUsage = cRLSign, keyCertSign
# Some might want this also
# nsCertType = sslCA, emailCA