On Wed, Sep 17, 2003, Edward Lewis wrote: > I don't see that it is possible to set an extension via a run time > parameter. The question is: am I missing something, is it already > possible? > > To elaborate on what I'd like to do, here's an example modulo syntax > finery... > > openssl x509 -req -in csr.pem -CA <stuff> \ > -subjAltName URI:<uri> -subjAltName dNSName:<name> > > Which would have a somewhat equivalent result as having this in the cnf > file: > > subjectAlternateName=URI:<uri>,dNSName:<name> > > (Perhaps -subjAltName URI:<uri>,dNSName:<name> would be a better param > form.)
YOu can dynamically create a config file with the relevant info or alternatively use an environment variable and use the env variable expansion in the config file: see the config file. Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email: [EMAIL PROTECTED], PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
