Cant be done, though most CAs dont use this information from the request.

Can do something like this:

rem 8. CN, O, OU1, OU2, E, city and all SAN types /w SHA1 & 2048
echo [ req ]>test8.cnf
echo default_bits = 2048>>test8.cnf
echo prompt = no>>test8.cnf
echo encrypt_key = no>>test8.cnf
echo default_md = sha1>>test8.cnf
echo distinguished_name = dn>>test8.cnf
echo req_extensions = req_ext>>test8.cnf

echo [ dn ]>>test8.cnf
echo CN = test8.com>>test8.cnf
echo emailAddress = te...@test8.com>>test8.cnf
echo O = organisation>>test8.cnf
echo L = city>>test8.cnf
echo ST = state>>test8.cnf
echo C = US>>test8.cnf
echo 0.OU= unit1>>test8.cnf
echo 1.OU= unit2>>test8.cnf

echo [ req_ext ]>>test8.cnf
echo subjectAltName = DNS:test8.com, email:te...@test8.com, IP:192.168.0.1,
RID:1.2.3.4.5.6, URI:/urihere>>test8.cnf
openssl req -new -config test8.cnf -keyout test8.com.key -out test8.com.csr




On Tue, Dec 3, 2013 at 2:10 AM, Anders Larsson <anders.lars...@exait.se>wrote:

> Hello.
>
> Im trying to use subjectAltName when im generating a csr on the
> commandline______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
>

Reply via email to