您好，您的邮件我已收到，我会尽快阅读，谢谢！
> On 26 Jan 2022, at 9:14 am, Bartlomiej wrote:
>
> I have a PEM file on the device which can contain an encrypted/non-encrypted
> private key. When it's encrypted, it's using PBES/PBKDF. The file is accessed
> from a C++ application which uses the OpenSSL library. If the key is
> encrypted, t
Thanks Matt,
After disabling the default config, basic constraints are omitted.
It seems a more revealing description is in “-config”: for a description of the
default value, see "COMMAND SUMMARY" in openssl(1).
I didn’t know “-config" has a default value and it usually points to the one
shipp
On 27/01/2022 06:00, Glen Huang wrote:
Hi,
I’m trying to create a signed certificate from a CA certificate without
creating a CSR first. From the doc, I came up with this command:
```
openssl req -CA ca.crt -CAkey ca.key -key leaf.key -subj ‘/CN=leaf’ -out
leaf.crt
```
However,
```
opens
