I don't see that it is possible to set an extension via a run time parameter. The question is: am I missing something, is it already possible?

To elaborate on what I'd like to do, here's an example modulo syntax finery...

openssl x509 -req -in csr.pem -CA <stuff> \
       -subjAltName URI:<uri> -subjAltName dNSName:<name>

Which would have a somewhat equivalent result as having this in the cnf file:

subjectAlternateName=URI:<uri>,dNSName:<name>

(Perhaps -subjAltName URI:<uri>,dNSName:<name> would be a better param form.)
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                            +1-703-227-9854
ARIN Research Engineer

Sponge Bob Square Pants?  I'm still trying to figure out the Macarena.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to