<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div>Dear Sergio,</div>
<div><br>
</div>
<div>please use a to-the-point email subject, not "openssl-users Digest, Vol 94, Issue 24".</div>
<div><br>
</div>
<div>You just made a small mistake with the below command: <br>
after the "-subj" option its "/" (which denotes the empty <span style="font-size: 14.666667px;">Distinguished Name) is missing, or </span>any other DN string,</div>
<div>and thus the subsequent "-addext" gets misinterpreted.<br>
<br>
</div>
<div>Unfortunately, the "<font face="Courier New, Courier, monospace">openssl</font>" CLI command so far did not provide a useful error message in such cases,<br>
but some time ago I improved this. So with the current master version, the hint given is slightly better:<br>
<br>
</div>
<pre>req: Extra option: "subjectKeyIdentifier=hash"</pre>
<pre>req: Use -help for summary.</pre>
<div><br>
</div>
<div>and this will be available with OpenSSL 3.1.<br>
<br>
BTW, if you want a validity period of exactly 100 years, you need to take into account 24 leap days/years,<br>
so better use "-days 36524" than "-days 36500".</div>
<div><br>
</div>
<div>Best,</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>David</div>
<div><br>
</div>
<div><br>
</div>
<div><span></span></div>
<div>On Tue, 2022-09-20 at 09:30 +0000, A Z wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Dear OpenSSL Users and Programmers,<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I tried running the following command in Windows 64 bit Home edition,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
and got the error:</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0">
><b>openssl req -nodes -newkey rsa:4096 -keyout pkey.pem -x509 -out cert.pem -days 36500 -subj -addext "subjectKeyIdentifier=hash"</b></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0">
<b>req: Use -help for summary.</b><br>
</div>
<div id="signature_bookmark"><br>
</div>
<div id="appendonsend"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
><b>openssl version</b> <br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof ContentPasted1">
<b>OpenSSL 3.0.0 7 sep 2021 (Library: OpenSSL 3.0.0 7 sep 2021)</b><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
In the email bundle reply, this line is suggested to generate a private key and a PEM certificate. How can I get this to run on</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
the Windows 10 64 bit, even when in Administrator mode?<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
Sergio Minervini.<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)" class="elementToProof">
<br>
</div>
</blockquote>
</body>
</html>