WIP - add extractor, generate snippet_data

node_modules/devcert-san/openssl.conf

@@ -0,0 +1,51 @@
+[ ca ]
+# `man ca`
+default_ca = CA_default
+
+[ CA_default ]
+default_md        = sha256
+name_opt          = ca_default
+cert_opt          = ca_default
+policy            = policy_loose
+database          = DATABASE_PATH
+serial            = SERIAL_PATH
+prompt            = no
+
+[ policy_loose ]
+# Only require minimal information for development certificates
+commonName              = supplied
+
+[ req ]
+# Options for the `req` tool (`man req`).
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+string_mask         = utf8only
+
+# SHA-1 is deprecated, so use SHA-2 instead.
+default_md          = sha256
+
+# Extension to add when the -x509 option is used.
+x509_extensions     = v3_ca
+
+[ req_distinguished_name ]
+# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
+commonName                      = Common Name
+
+[ v3_ca ]
+# Extensions for a typical CA (`man x509v3_config`).
+subjectKeyIdentifier = hash
+subjectAltName = email:user@localhost
+authorityKeyIdentifier = keyid:always,issuer
+basicConstraints = critical, CA:true
+keyUsage = critical, digitalSignature, cRLSign, keyCertSign
+
+[ server_cert ]
+# Extensions for server certificates (`man x509v3_config`).
+basicConstraints = CA:FALSE
+nsCertType = server
+nsComment = "OpenSSL Generated Server Certificate"
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer:always
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName=DNS:localhost