[openssl-users] New usability feature

Viktor Dukhovni openssl-users at dukhovni.org
Thu Dec 28 21:43:28 UTC 2017



> On Dec 28, 2017, at 4:34 PM, Dmitry Belyavsky <beldmit at gmail.com> wrote:
> 
> Great news!
> Does it work for certificates too?

The updated documentation says:

+=item B<-addext ext>    
+    
+Add a specific extension to the certificate (if the B<-x509> option is    
+present) or certificate request. The argument must have the form of    
+a key=value pair as it would appear in a config file.    
+    
+This option can be given multiple times.

So it should work for "openssl req -x509".  There should probably be
corresponding changes for "openssl x509 -req", which can be used for
more than just self-signed certs.

-- 
	Viktor.



More information about the openssl-users mailing list