You could use a different config file and reference it on the command line.
Reqexts is used to reference a section in a config file. Ryan Hurst Sent from my phone, please forgive the brevity. > On Dec 3, 2013, at 5:19 PM, Anders Larsson <anders.lars...@exait.se> wrote: > > Hmm somehow the e-mail got cut after 1'st line? :-( > > Thanks Ryan for the echo suggestion, but it will just end up in an config > file. > Also since im running the CA internally it will use the information. > > If there is a -reqexts flag? What use is it if it cannot add extensions? > Especially since a subjectAltName is probably one of the most well used > objects? > > Or should I completely avoid the cmd-line csr generation "oneliner" and > always go for a config file? > > With Regards > /Anders > > ------orginal message below----- > Hello. > > Im trying to use subjectAltName when im generating a csr on the commandline. > > I been trying with the "-reqexts" flag, but im only getting errors.... > 'Openssl req -new -key debug.key -passin pass:abcd -out debug.csr -subj > '/C=SE/ST=Stockholm/L=Stockholm/O=ABC/OU=IntSys/CN=some.dns.stuff.int/' > -reqexts subjectAltName=DNS:xyz.host.name.cc.int' > > All it gives is a: "Error Loading request extension section > subjectAltName=DNS:xyz.host.name.cc.int > > The config file is an option that seems to work, but I have not been able to > mix config file with cmd-line parameters....As soon as I try the openssl req > seems to require the subject to be inside the config file :-/ > > The CA used is an internal one. > > Is it possible, and if so, how do I format the cmd-line to make it accept > x509 extensions from the cmd-line? > > With Regards > /Anders > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
