---
test_ca_dsa:
  ca_cert:
    cert: dsa_root.cer
    key: dsa_root.key
  crl_validity_hours: 72
  ocsp_validity_hours: 96
  ocsp_start_skew_seconds: 1800
  profiles:
    server:
      basic_constraints:
        :ca: false
      key_usage:
        :value:
        - digitalSignature
        - keyEncipherment
      extended_key_usage:
        :value:
        - serverAuth
    client:
      basic_constraints:
        :ca: false
      key_usage:
        :value:
        - digitalSignature
        - keyEncipherment
      extended_key_usage:
        :value:
        - clientAuth