X509V3_EXT_nconf_int:error in extension:crypto/x509/v3_conf.c:48:section=req_ext, name=extendedKeyUsage, value=

Viktor Dukhovni openssl-users at dukhovni.org
Wed Jul 5 18:24:28 UTC 2023

On Wed, Jul 05, 2023 at 01:05:04PM -0400, Robert Moskowitz wrote:
> no on -addext:
> openssl req -config $dir/openssl-root.cnf -reqexts req_ext_bk\
>      -addext "subjectAltName = email:rgm at example.com"\
>      -key $dir/private/$clientemail.key.$format \
>      -subj "$DN" -new -out $dir/csr/$clientemail.csr.$format

Yes, "-reqexts" (intentionally or otherwise) supresses "addext".
Perhaps open an issue, to see whether this is a documentation deficiency
(intentional) or a bug.


More information about the openssl-users mailing list