Hello, I am attempting to create a self-signed x509 cert. with basic constraints set to critical,CA:true,pathlen:5 using the following command (and various permutations of the same):
"openssl req -new -key /etc/apache2/key-ca.pem -x509 -extensions basicConstraints=critical,CA:TRUE,pathlen:5 -days 365 -out /etc/apache2/cert-ca.pem" With the command as written I get the following error: "Error Loading extension section basicConstraints=critical,CA:TRUE,pathlen:5" I have not modified openssl.cnf. I'd like to know how to do this from the command line. I've read the man pages for req, genrsa, and x509 and have done quite a bit of searching for examples. Thanks for any help.
