[openssl-users] Cant seem to get prompt no to work

Jakob Bohm jb-openssl at wisemo.com
Thu Aug 17 23:01:45 UTC 2017


On 18/08/2017 00:09, Robert Moskowitz wrote:
>
>
> On 08/17/2017 05:38 PM, Salz, Rich wrote:
>>> declare -x organizationalUnitName=""
>>> routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1
>>     You are setting an empty OU.  You should not set it and see if 
>> that works
>>
> organizationalUnitName = "."  puts a . in it.  So I have to figure out 
> a way to drop that line from the config.
>
> like if a field is not needed:
>
> sed -i -e "s/^organizationalUnitName/#organizationalUnitName/w 
> /dev/stdout" openssl-root.cnf
>
>
> But this is not quite right.  I have to find the one that has ENV in 
> it.  I DO have an example of one such to use...
>
>
Given all these problems with the Distinguished Name prompting
mechanism, just add the -subject option to the req command line
(using appropriate environment variables in the shell script).


Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded



More information about the openssl-users mailing list