# this signer can handle any key type OpenSSL can
Signer=OpenSSLSigner
# use hash from client directly rather than hash it again
Hash=fakeSHA1
# the signing key
SigningKey=keys/rsa2k2013.key
# cert chain to verify above
Certs=certs/rsa2k2013.certs
# optional header
SigHeader= /C=US/ST=California/O=Crufty.NET/CN=Crufty2013/emailAddress=root@crufty.net
# hint to client the extension to use
SigExt= .sig
# a desired PEM tag
PEMTag= RSA SIGNATURE
# the port to listen on - rc_sigs feeds this same config to signctl.py
ListenPort=17713
# one child per cpu works well
children=2
syslogFacility=local0.info
