X509V3_EXT_nconf_int:error in extension:crypto/x509/v3_conf.c:48:section=req_ext, name=extendedKeyUsage, value=

[Robert Moskowitz]

#21370

My first issue that I submitted myself for openssl.  :)

Had to remember my github password.

On 7/5/23 14:24, Viktor Dukhovni wrote:
> On Wed, Jul 05, 2023 at 01:05:04PM -0400, Robert Moskowitz wrote:
>> no on -addext:
>>
>> openssl req -config $dir/openssl-root.cnf -reqexts req_ext_bk\
>>       -addext "subjectAltName = email:rgm at example.com"\
>>       -key $dir/private/$clientemail.key.$format \
>>       -subj "$DN" -new -out $dir/csr/$clientemail.csr.$format
> Yes, "-reqexts" (intentionally or otherwise) supresses "addext".
> Perhaps open an issue, to see whether this is a documentation deficiency
> (intentional) or a bug.
>