[openssl-users] Signing a csr with subjectAltName using x509 command

Viktor Dukhovni openssl-users at dukhovni.org
Thu Jan 14 16:28:46 UTC 2016

On Thu, Jan 14, 2016 at 01:08:02PM +0000, Gareth Williams wrote:

> On Thursday 14 January 2016 10:59:01 Mauro Romano Trajber wrote:
> > Could you send me the ca command line? There's any way to run it without
> > creating a .cnf - using only <(print notation?
> To be honest, I don't know whether you could run it purely from the command 
> line without a config file as there are many configuration options needed to 
> operate openssl as a CA.  Saying that, defaults values may work for many of 
> those.

That's what the script I posted does, it bypasses all the bagage
of .cnf files and a stateful CA, by constructing miniature ".cnf"
files on the fly via <(printf ....).  So yes, this can be done.


More information about the openssl-users mailing list