X509V3_EXT_nconf_int:error in extension:crypto/x509/v3_conf.c:48:section=req_ext, name=extendedKeyUsage, value=

[Viktor Dukhovni]

On Wed, Jul 05, 2023 at 01:05:04PM -0400, Robert Moskowitz wrote:
> no on -addext:
> 
> openssl req -config $dir/openssl-root.cnf -reqexts req_ext_bk\
>      -addext "subjectAltName = email:rgm at example.com"\
>      -key $dir/private/$clientemail.key.$format \
>      -subj "$DN" -new -out $dir/csr/$clientemail.csr.$format

Yes, "-reqexts" (intentionally or otherwise) supresses "addext".
Perhaps open an issue, to see whether this is a documentation deficiency
(intentional) or a bug.

-- 
    Viktor.