I recommend to stay away from openssl.cnf and create your own config files. You
may find http://pki-tutorial.readthedocs.org/ useful as it provides plenty of
example configs. And no, you cannot prompt for a SAN, but you can use an
environment variable which is almost as good.
Cheers,
Stefan
On
Hello,
I've read numerous webpages but I still don't understand many things on how to
get it working properly.
I'm trying to add a subjectAltName so that my browser won't give me a
certificate warning whether I access the web server using the fqdn or an IP
address.
In many web pages about th