roles_oid = "1.3.6.1.4.1.64862.3.1"
 
root_cert_file = "/etc/certes/root.pem"
<% if @ca -%>
key_file = "/etc/certes/ca_key.pem"
cert_file = "/etc/certes/ca_cert.pem"
<% else -%>
key_file = "/etc/certes/key.pem"
cert_file = "<%= @var_path %>/cert.pem"
<% end -%>
crl_path = "<%= @var_path %>/crls"
 
lock_file = "<%= @var_path %>/agent.lock"
agent_socket_path = "<%= @var_path %>/agent.sock"

cert_org = "MinMaxiste Inc."
cert_email = "certes@minmaxiste.com"
<% if @ca -%>

authority_fqdn = "localhost"
authority_port = 9790

#
# This section is for certes authorities. It sets default parameters
# for certificate generation and renewals.
#
peer_authorities = [
<% @peer_authorities.each do |peer| -%>
	"<%= peer %>"
<% end -%>
]
 
certdb_path = "<%= @var_path %>/certdb.sqlite"
certdb_backup_path = "<%= @var_path %>/certdb.sqlite.bk"
certdb_backup_interval_seconds = 900
 
# This supports OpenSSL's bignum integers, we can shard amongst authorities
# to avoid serial collisions.
min_serial = "<%= @min_serial %>"
max_serial = "<%= @max_serial %>"
<% else -%>

authority_fqdn = "certes.<%= @domain %>"
authority_port = 9790

bootstrap_key = "<%= @bootstrap_key %>"
<% end -%>
