Having wrestled with this in the past, I want to point out that with commit https://github.com/openssl/openssl/commit/bfa470a4f64313651a35571883e235d3335054eb in master, it’s now possible to put a SAN field (or any extension) in a cert request via the command line; no special custom config or fancy ENV vars needed.
Hooray!
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
