File: config/gemini_openssl.cnf

# Minimal OpenSSL configuration for Gemini capsule self-signed certificate generation.
# Bundled with BinktermPHP so the Gemini daemon works on Windows without requiring
# a system-wide OpenSSL installation or OPENSSL_CONF environment variable.

[ req ]
default_bits        = 2048
default_md          = sha256
distinguished_name  = req_distinguished_name
x509_extensions     = v3_server
prompt              = no
string_mask         = utf8only

[ req_distinguished_name ]
CN = localhost

[ v3_server ]
subjectKeyIdentifier = hash
basicConstraints     = CA:false
keyUsage             = critical, digitalSignature, keyEncipherment
extendedKeyUsage     = serverAuth