Re: Need some help signing a certificate request

2021-08-21 Thread Keine Eile
Am 21.08.21 um 19:53 schrieb rgor...@centerprism.com: I am fine on the command line. I just need a little help with openssl. Do you have any ideas on setting the hostname with openssl.cnf? If it would be bash on Linux, scripting this not a challenge. About Windows: No idea, sorry.

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
I figured it out: openssl req -new -key private_key.pem -out req.pem -outform PEM -subj /CN=%COMPUTERNAME%/O=server/ -nodes Thanks for you comment. -Original Message- From: openssl-users On Behalf Of Keine Eile Sent: Saturday, August 21, 2021 1:46 PM To: openssl-users@openssl.org Subj

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
I am fine on the command line. I just need a little help with openssl. Do you have any ideas on setting the hostname with openssl.cnf? -Original Message- From: openssl-users On Behalf Of Keine Eile Sent: Saturday, August 21, 2021 1:46 PM To: openssl-users@openssl.org Subject: Re: Need so

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
It was the index.txt like you said. Thank you. -Original Message- From: openssl-users On Behalf Of Michael Wojcik Sent: Saturday, August 21, 2021 1:43 PM To: openssl-users@openssl.org Subject: RE: Need some help signing a certificate request > From: rgor...@centerprism.com > Sent: Satu

Re: Need some help signing a certificate request

2021-08-21 Thread Keine Eile
Hi rgor...@centerprism.com, the substitution for your CA did not work: 'Subject: CN = $(hostname), O = server'. My recommendation, if you are not familiar with openssl and the command line would be, use XCA, there is a Windows version available. -> https://hohnstaedt.de/xca/ Am 21.08.21 um 19

RE: Need some help signing a certificate request

2021-08-21 Thread Michael Wojcik
> From: rgor...@centerprism.com > Sent: Saturday, 21 August, 2021 11:26 > > My openssl.cnf (I have tried `\` and `\\` and `/` directory separators): Use forward slashes. Backslashes should work on Windows, but forward slashes work everywhere. I don't know that "\\" will work anywhere. > [ ca

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
The req.pem contents: -BEGIN CERTIFICATE REQUEST- MIICbDCCAVQCAQAwJzEUMBIGA1UEAwwLJChob3N0bmFtZSkxDzANBgNVBAoMBnNl cnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKXeMnFZM4+aAtyb YJwau1WLdAFxtlNiLKPZ6WdX0cGyEFeMa9DG+f6R6ZBn6ifwiae8KJmK+maeN5Th +NKKYRvJQaNo5h/62lqJMjuLDZqS9B+WtPmu7ZwWqltII

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
My openssl.cnf (I have tried `\` and `\\` and `/` directory separators): [ ca ] default_ca = testca [ testca ] dir = . certificate = $dir\\ca_certificate.pem database = $dir\\index.txt new_certs_dir = $dir\\certs private_key = $dir\\private\\ca_private_key.pem serial = $dir\\serial default_crl_d

RE: Need some help signing a certificate request

2021-08-21 Thread Michael Wojcik
> From: openssl-users On Behalf Of > rgor...@centerprism.com > Sent: Saturday, 21 August, 2021 09:48 > Thanks for the comment. I have tried both `/` and `\` with no change. Most or all Windows APIs, and most programs, support the forward slash as a directory separator. The exceptions are mostl

RE: Need some help signing a certificate request

2021-08-21 Thread rgordey
Thanks for the comment. I have tried both `/` and `\` with no change. From: openssl-users On Behalf Of Tom Browder Sent: Saturday, August 21, 2021 11:41 AM Cc: openssl-users@openssl.org Subject: Re: Need some help signing a certificate request On Sat, Aug 21, 2021 at 09:21 mailto:rgor..

Re: Need some help signing a certificate request

2021-08-21 Thread Tom Browder
On Sat, Aug 21, 2021 at 09:21 wrote ... > When I type ‘openssl ca -config .\openssl.cnf -in ../server/req.pem -out > I don't do wndows, but your directory separators are not consistent--not sure of the effect. -Tom

Need some help signing a certificate request

2021-08-21 Thread rgordey
Hello all, I am using OpenSSL 1.1.1k 25 Mar 2021 on Windows 10 c:\OpenSSL\x64\bin is part of my path. When I type 'openssl ca -config .\openssl.cnf -in ../server/req.pem -out server_certificate.pem -notext -batch -extensions server_ca_extensions' I get nothing out. No 'server_certifica