128 lines
2.9 KiB
JSON
128 lines
2.9 KiB
JSON
{
|
|
"ca": {
|
|
"debugAddr": ":8001",
|
|
"tls": {
|
|
"caCertFile": "test/grpc-creds/minica.pem",
|
|
"certFile": "test/grpc-creds/ca.boulder/cert.pem",
|
|
"keyFile": "test/grpc-creds/ca.boulder/key.pem"
|
|
},
|
|
"hostnamePolicyFile": "test/hostname-policy.yaml",
|
|
"grpcCA": {
|
|
"maxConnectionAge": "30s",
|
|
"address": ":9093",
|
|
"services": {
|
|
"ca.CertificateAuthority": {
|
|
"clientNames": [
|
|
"ra.boulder"
|
|
]
|
|
},
|
|
"ca.OCSPGenerator": {
|
|
"clientNames": [
|
|
"ra.boulder"
|
|
]
|
|
},
|
|
"ca.CRLGenerator": {
|
|
"clientNames": [
|
|
"crl-updater.boulder"
|
|
]
|
|
},
|
|
"grpc.health.v1.Health": {
|
|
"clientNames": [
|
|
"health-checker.boulder"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"saService": {
|
|
"dnsAuthority": "consul.service.consul",
|
|
"srvLookup": {
|
|
"service": "sa",
|
|
"domain": "service.consul"
|
|
},
|
|
"timeout": "15s",
|
|
"noWaitForReady": true,
|
|
"hostOverride": "sa.boulder"
|
|
},
|
|
"issuance": {
|
|
"profile": {
|
|
"allowMustStaple": true,
|
|
"allowCTPoison": true,
|
|
"allowSCTList": true,
|
|
"allowCommonName": true,
|
|
"policies": [
|
|
{
|
|
"oid": "2.23.140.1.2.1"
|
|
}
|
|
],
|
|
"maxValidityPeriod": "7776000s",
|
|
"maxValidityBackdate": "1h5m"
|
|
},
|
|
"issuers": [
|
|
{
|
|
"useForRSALeaves": false,
|
|
"useForECDSALeaves": true,
|
|
"issuerURL": "http://127.0.0.1:4001/aia/issuer/5214744660557630",
|
|
"ocspURL": "http://127.0.0.1:4002/",
|
|
"location": {
|
|
"configFile": "/hierarchy/intermediate-signing-key-ecdsa.pkcs11.json",
|
|
"certFile": "/hierarchy/intermediate-cert-ecdsa-a.pem",
|
|
"numSessions": 2
|
|
}
|
|
},
|
|
{
|
|
"useForRSALeaves": true,
|
|
"useForECDSALeaves": true,
|
|
"issuerURL": "http://127.0.0.1:4001/aia/issuer/6605440498369741",
|
|
"ocspURL": "http://127.0.0.1:4002/",
|
|
"location": {
|
|
"configFile": "test/test-ca.key-pkcs11.json",
|
|
"certFile": "/hierarchy/intermediate-cert-rsa-a.pem",
|
|
"numSessions": 2
|
|
}
|
|
},
|
|
{
|
|
"useForRSALeaves": false,
|
|
"useForECDSALeaves": false,
|
|
"issuerURL": "http://127.0.0.1:4001/aia/issuer/41127673797486028",
|
|
"ocspURL": "http://127.0.0.1:4002/",
|
|
"location": {
|
|
"configFile": "test/test-ca.key-pkcs11.json",
|
|
"certFile": "/hierarchy/intermediate-cert-rsa-b.pem",
|
|
"numSessions": 2
|
|
}
|
|
}
|
|
],
|
|
"ignoredLints": [
|
|
"n_subject_common_name_included"
|
|
]
|
|
},
|
|
"expiry": "7776000s",
|
|
"backdate": "1h",
|
|
"serialPrefix": 127,
|
|
"maxNames": 100,
|
|
"lifespanOCSP": "96h",
|
|
"lifespanCRL": "216h",
|
|
"crldpBase": "http://c.boulder.test",
|
|
"goodkey": {
|
|
"weakKeyFile": "test/example-weak-keys.json",
|
|
"blockedKeyFile": "test/example-blocked-keys.yaml",
|
|
"fermatRounds": 100
|
|
},
|
|
"ocspLogMaxLength": 4000,
|
|
"ocspLogPeriod": "500ms",
|
|
"ecdsaAllowListFilename": "test/config/ecdsaAllowList.yml",
|
|
"features": {}
|
|
},
|
|
"pa": {
|
|
"challenges": {
|
|
"http-01": true,
|
|
"dns-01": true,
|
|
"tls-alpn-01": true
|
|
}
|
|
},
|
|
"syslog": {
|
|
"stdoutlevel": 4,
|
|
"sysloglevel": 4
|
|
}
|
|
}
|