[req]
default_bits       = 2048
default_md         = sha256
string_mask        = utf8only
prompt             = no
encrypt_key        = no
distinguished_name = req_dn

[req_dn]
C  = US
ST = California
L  = Mountain View
O  = Test CA
CN = 127.0.0.1

[crit-codeSigning]
subjectAltName         = IP:127.0.0.1
basicConstraints       = critical, CA:false
subjectKeyIdentifier   = hash
extendedKeyUsage       = critical, codeSigning

[non-crit-codeSigning]
subjectAltName         = IP:127.0.0.1
basicConstraints       = critical, CA:false
subjectKeyIdentifier   = hash
extendedKeyUsage       = codeSigning