Re: [openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-14 Thread Mauro Romano Trajber
ay 14 January 2016 10:59:01 Mauro Romano Trajber wrote: > > > Could you send me the ca command line? There's any way to run it > without > > > creating a .cnf - using only <(print notation? > > > > To be honest, I don't know whether you could run it p

Re: [openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-14 Thread Mauro Romano Trajber
There's any advantage to use ca command instead x509 command? Why there's two different ways to sign a certificate request? On Thu, Jan 14, 2016 at 11:08 AM, Gareth Williams < gar...@garethwilliams.me.uk> wrote: > On Thursday 14 January 2016 10:59:01 Mauro Romano Trajber w

Re: [openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-14 Thread Mauro Romano Trajber
Could you send me the ca command line? There's any way to run it without creating a .cnf - using only <(print notation? On Thu, Jan 14, 2016 at 6:07 AM, Gareth Williams < gar...@garethwilliams.me.uk> wrote: > On Wednesday 13 January 2016 16:22:10 Mauro Romano Trajber >

Re: [openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-13 Thread Mauro Romano Trajber
ert Requested Extensions: X509v3 Subject Alternative Name: IP Address:1.1.1.1, DNS:www.example.com ... On Wed, Jan 13, 2016 at 4:46 PM, Viktor Dukhovni wrote: > > > On Jan 13, 2016, at 1:22 PM, Mauro Romano Trajber > wrote: > > > >

Re: [openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-13 Thread Mauro Romano Trajber
In which section? On section [CA_default] I have 'copy_extensions = copy' Can I do this using only command line options? On Wed, Jan 13, 2016 at 3:42 PM, Salz, Rich wrote: > >But when I try to sign it using my own CA using the x509 command this > data is removed > > You need to make sure that

[openssl-users] Signing a csr with subjectAltName using x509 command

2016-01-13 Thread Mauro Romano Trajber
Hi, I created a CSR with subjectAlternativeNames: $ openssl req -noout -in my.csr -text Requested Extensions: X509v3 Subject Alternative Name: IP Address:1.1.1.1, DNS:www.example.com ... But when I try to sign it using my own CA using the x509 command this data