149 lines
3.1 KiB
JSON
149 lines
3.1 KiB
JSON
{
|
|
"syslog": {
|
|
"network": "",
|
|
"server": "",
|
|
"tag": "boulder"
|
|
},
|
|
|
|
"amqp": {
|
|
"server": "amqp://guest:guest@localhost:5672",
|
|
"-uncomment_for_AMQPS-ssl": {
|
|
"cacertfile": "/etc/boulder/rabbitmq-cacert.pem",
|
|
"certfile": "/etc/boulder/rabbitmq-cert.pem",
|
|
"keyfile": "/etc/boulder/rabbitmq-key.pem"
|
|
},
|
|
"RA": {
|
|
"client": "RA.client",
|
|
"server": "RA.server"
|
|
},
|
|
"VA": {
|
|
"client": "VA.client",
|
|
"server": "VA.server"
|
|
},
|
|
"SA": {
|
|
"client": "SA.client",
|
|
"server": "SA.server"
|
|
},
|
|
"CA": {
|
|
"client": "CA.client",
|
|
"server": "CA.server"
|
|
}
|
|
},
|
|
|
|
"statsd": {
|
|
"server": "localhost:8125",
|
|
"prefix": "Boulder"
|
|
},
|
|
|
|
"wfe": {
|
|
"listenAddress": "127.0.0.1:4000"
|
|
},
|
|
|
|
"ca": {
|
|
"serialPrefix": 255,
|
|
"profile": "ee",
|
|
"dbDriver": "sqlite3",
|
|
"dbName": ":memory:",
|
|
"testMode": true,
|
|
"_comment": "This should only be present in testMode. In prod use an HSM.",
|
|
"Key": {
|
|
"File": "test/test-ca.key"
|
|
},
|
|
"expiry": "2160h",
|
|
"lifespanOCSP": "96h",
|
|
"maxNames": 1000,
|
|
"cfssl": {
|
|
"signing": {
|
|
"profiles": {
|
|
"ee": {
|
|
"usages": [
|
|
"digital signature",
|
|
"key encipherment",
|
|
"server auth",
|
|
"client auth"
|
|
],
|
|
"backdate": "1h",
|
|
"is_ca": false,
|
|
"issuer_urls": [
|
|
"http://int-x1.letsencrypt.org/cert"
|
|
],
|
|
"ocsp_url": "http://int-x1.letsencrypt.org/ocsp",
|
|
"crl_url": "http://int-x1.letsencrypt.org/crl",
|
|
"policies": [
|
|
{
|
|
"ID": "2.23.140.1.2.1"
|
|
},
|
|
{
|
|
"ID": "1.3.6.1.4.1.44947.1.1.1",
|
|
"type": "id-qt-cps",
|
|
"qualifier": "http://cps.root-x1.letsencrypt.org"
|
|
}
|
|
],
|
|
"expiry": "8760h",
|
|
"CSRWhitelist": {
|
|
"PublicKeyAlgorithm": true,
|
|
"PublicKey": true,
|
|
"SignatureAlgorithm": true
|
|
},
|
|
"UseSerialSeq": true
|
|
}
|
|
},
|
|
"default": {
|
|
"usages": [
|
|
"digital signature"
|
|
],
|
|
"expiry": "8760h"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
|
|
"sa": {
|
|
"dbDriver": "sqlite3",
|
|
"dbName": ":memory:"
|
|
},
|
|
|
|
"va": {
|
|
"dnsResolver": "8.8.8.8:53",
|
|
"dnsTimeout": "10s"
|
|
},
|
|
|
|
"sql": {
|
|
"SQLDebug": true,
|
|
"CreateTables": true
|
|
},
|
|
|
|
"revoker": {
|
|
"dbDriver": "sqlite3",
|
|
"dbName": ":memory:"
|
|
},
|
|
|
|
"ocspResponder": {
|
|
"dbDriver": "sqlite3",
|
|
"dbName": ":memory:",
|
|
"path": "/",
|
|
"listenAddress": "localhost:4001"
|
|
},
|
|
|
|
"ocspUpdater": {
|
|
"dbDriver": "sqlite3",
|
|
"dbName": ":memory:",
|
|
"minTimeToExpiry": "72h"
|
|
},
|
|
|
|
"mail": {
|
|
"server": "mail.example.com",
|
|
"port": "25",
|
|
"username": "cert-master@example.com",
|
|
"password": "password"
|
|
},
|
|
|
|
"common": {
|
|
"baseURL": "http://localhost:4000",
|
|
"issuerCert": "test/test-ca.pem",
|
|
"maxKeySize": 4096
|
|
},
|
|
|
|
"subscriberAgreementURL": "http://localhost:4300/terms"
|
|
}
|