On Tue, 2007-09-18 at 06:00 -0700, qkadir wrote: > Hi, > > I use the following command to create a certificate request. > > openssl req -new -nodes -out new-req.pem -keyout new-key.pem > > But this command demands country, state, organization name, email etc. > information from command line like the following example. I don' t want to > enter country, state, organization name etc from command line like this > example. I want to add this information (country, name, email etc) with some > parameters like "-country TR -state KOCAELI ..." to openssl command. How > can I do this? > > # openssl req -new -nodes -out new-req.pem -keyout new-key.pem > > Generating a 1024 bit RSA private key > ..................................++++++ > .........................++++++ > writing new private key to 'new-key.pem' > ----- > You are about to be asked to enter information that will be incorporated > into your certificate request. > What you are about to enter is what is called a Distinguished Name or a DN. > There are quite a few fields but you can leave some blank > For some fields there will be a default value, > If you enter '.', the field will be left blank. > ----- > Country Name (2 letter code) [AU]:TR > State or Province Name (full name) [Some-State]:KOCAELI > Locality Name (eg, city) []:GEBZE > Organization Name (eg, company) [Internet Widgits Pty Ltd]:TUBITAK-UEKEAE > Organizational Unit Name (eg, section) []:OpenTC > Common Name (eg, YOUR name) []:Kadir > Email Address []:[EMAIL PROTECTED] > > Please enter the following 'extra' attributes > to be sent with your certificate request > A challenge password []:test > An optional company name []:uekae
You may try something like that: openssl req -new -nodes -out new-req.pem -keyout new-key.pem \ -subj "/C=TR/ST=KOCAELI/L=GEBZE/O=TUBITAK-UEKEAE/OU=OpenTC/CN=Kadir/[EMAIL PROTECTED]/" Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
