# Configuration file for gvm-manage-certs
# All options listed below can also be set as environment variables
# Options set in this file take precedence over environment variables

# Certificate options
# Lifetime in days
# GVM_CERTIFICATE_LIFETIME=730
# Country
# GVM_CERTIFICATE_COUNTRY="DE"
# State
# GVM_CERTIFICATE_STATE=""
# Locality
# GVM_CERTIFICATE_LOCALITY="Osnabrueck"
# Organization
# GVM_CERTIFICATE_ORG="GVM Users"
# (Organization unit)
# GVM_CERTIFICATE_ORG_UNIT=""

# Hostname
# If not set, gvm-manage-certs will try to guess the hostname and
# default to "localhost" if it cannot be guessed
# GVM_CERTIFICATE_HOSTNAME=

# Certificate Authority (CA) certificate options
# CA Lifetime in days
# GVM_CA_CERTIFICATE_LIFETIME=3652
# Country
# GVM_CA_CERTIFICATE_COUNTRY="$GVM_CERTIFICATE_COUNTRY"
# State
# GVM_CA_CERTIFICATE_STATE="$GVM_CERTIFICATE_STATE"
# Locality
# GVM_CA_CERTIFICATE_LOCALITY="$GVM_CERTIFICATE_LOCALITY"
# Organization
# GVM_CA_CERTIFICATE_ORG="$GVM_CERTIFICATE_ORG"
# (Organization unit)
# GVM_CA_CERTIFICATE_ORG_UNIT="Certificate Authority for $GVM_CERTIFICATE_HOSTNAME"

# Key size for private keys in byte
# If not set, gvm-manage-certs will take the default from the
# GnuTLS security level (see below)
# GVM_CERTIFICATE_KEYSIZE=

# GnuTLS security level for private key generation
# Valid values are:
#   low, legacy, medium, high, ultra
# GVM_CERTIFICATE_SECPARAM="high"

# Hash algorithm to use for certificate signatures
# Valid values are:
#   SHA1, RMD160, SHA256, SHA384, SHA512
# GVM_CERTIFICATE_SIGNALG="SHA256"

# Location in file system where private keys are stored
# GVM_KEY_LOCATION="@GVM_STATE_DIR@/private/CA"
# Location in file system where certificates are stored
# GVM_CERT_LOCATION="@GVM_STATE_DIR@/CA"

# Prefix for generated files
# If not set, files will be named "key.pem" and "cert.pem"
# If set to "server", files will be named "serverkey.pem" and "servercert.pem"
# GVM_CERT_PREFIX=""

# Directory to use for keys and certificates before installation
# This directory has to exist and has to be writable
# If not set, gvm-manage-certs will use a temporary directory
# GVM_CERT_DIR=

# Filename to use for generated private key
# GVM_KEY_FILENAME="$GVM_CERT_DIR/${GVM_CERT_PREFIX}key.pem"
# Filename to use for generated certificate
# GVM_CERT_FILENAME="$GVM_CERT_DIR/${GVM_CERT_PREFIX}cert.pem"
# Filename to use for generated certificate request
# GVM_CERT_REQUEST_FILENAME="$GVM_CERT_DIR/${GVM_CERT_PREFIX}request.pem"
# Filename to use for generated certificate template
# GVM_CERT_TEMPLATE_FILENAME=cert.cfg"

# Filename of CA private key used for signing certificates
# GVM_SIGNING_CA_KEY_FILENAME="$GVM_KEY_LOCATION/cakey.pem"
# Filename of CA certificate used for signing certificates
# GVM_SIGNING_CA_CERT_FILENAME="$GVM_CERT_LOCATION/cacert.pem"
