[req]
default_bits = 4096
prompt = no
default_md = sha256
req_extensions = v3_req
distinguished_name = dn

[ca]
default_ca=ca_pgbackrest

[ca_pgbackrest]
database=index.txt
unique_subject=no
default_md=sha256

[ dn ]
C=US
ST=All
L=All
O=pgBackRest
OU=Unit Testing Domain
CN = test.pgbackrest.org

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[ alt_names ]
# Used in container unit tests
DNS.1 = test.pgbackrest.org
DNS.2 = *.test.pgbackrest.org
DNS.3 = *.test2.pgbackrest.org

# Test IP matching
IP.1 = 127.0.0.1
IP.2 = ::1

# Unused alt name type for coverage
email.0 = email@email.com

# Used in integration tests
DNS.5 = pg1
DNS.6 = pg2
DNS.7 = repo