[openssl-users] Signing a csr with subjectAltName using x509 command

[Viktor Dukhovni]

On Thu, Jan 14, 2016 at 01:08:02PM +0000, Gareth Williams wrote:

> On Thursday 14 January 2016 10:59:01 Mauro Romano Trajber wrote:
> > Could you send me the ca command line? There's any way to run it without
> > creating a .cnf - using only <(print notation?
> 
> To be honest, I don't know whether you could run it purely from the command 
> line without a config file as there are many configuration options needed to 
> operate openssl as a CA.  Saying that, defaults values may work for many of 
> those.

That's what the script I posted does, it bypasses all the bagage
of .cnf files and a stateful CA, by constructing miniature ".cnf"
files on the fly via <(printf ....).  So yes, this can be done.

-- 
	Viktor.