cesnet-tcs.conf

# Configuration for cesnet-tcs

# Path of the client certificate for authentication with CESNET TCS API.
client_cert=

# Path of the client key for authentication with CESNET TCS API.
client_key=

# Telephone number for verification of the requester in int. E.123 format.
requester_phone=

# E-mail address where to send warnings and information about the certificate.
# NOTE: Due to bug in the TCS API only single address can be used now.
#notification_mails=

# Type of the certificate; "ov" (organization validated), "es" (grid cert),
# or "ev" (extended validation).
#cert_type="ov"

# Validity of the certificate in years; 1, or 2.
#cert_validity=1

# Language variant of the organization name; "cs", "en", or "ac" (ASCII).
#subject_lang="en"

# Algorithm to use for generating the certificate key. Only RSA (e.g.
# "rsa:3072") and EC (e.g. "prime256v1") are supported.
# IMPORTANT: If you want to use RSA instead of EC, you have to also change
# $interm_cert_url according to https://pki.cesnet.cz/cs/ch-tcs-ssl-ca-4-crt-crl.html!
#key_alg="prime256v1"

# Umask to use when creating the certificate key file.
#key_umask=277

# Create a temporary self-signed certificate in $certs_dir/<domain>.crt that
# can be used until the requested certificate is issued?
# It will be created only when $certs_dir/<domain>.crt doesn't exist.
#create_temp_cert=no

# Add the intermediate certificate to the issued certificate?
#interm_cert_include=yes

# URL of the intermediate certificate(s). You may provide multiple URLs
# separated by a whitespace.
#interm_cert_url="https://pki.cesnet.cz/_media/certs/geant_ov_ecc_ca_4.pem"

# Connection and transfer timeout in seconds.
#timeout=

# Base URI of the CESNET API.
#cesnet_api_uri="https://tcs.cesnet.cz/api/v2"

# Path of the directory where to store issued certificates.
#certs_dir="/etc/ssl/cesnet"

# Path of the directory with the certificate keys.
#keys_dir="/etc/ssl/cesnet"

# Path of the directory where to store IDs of the certificate requests for
# cesnet-tcs-fetch-issued cron script.
#spool_dir="/var/spool/cesnet-tcs"

# Logger facility for the cesnet-tcs-fetch-issued cron script.
#logger_facility="cron"

# Path of the script to execute after fetching new certificate(s) by
# cesnet-tcs-fetch-issued. It will get domain names of the fetched certificates
# as arguments.
#post_fetch_script="/etc/cesnet-tcs/post-fetch.sh"

# How many days before certificate expiration should the cesnet-tcs-renew cron
# script request a new certificate. If $create_temp_cert is enabled, it will
# also define validity of the temporary certificates.
#renew_days_before=14