Thanks Matt,
After disabling the default config, basic constraints are omitted.
It seems a more revealing description is in “-config”: for a description of the
default value, see "COMMAND SUMMARY" in openssl(1).
I didn’t know “-config" has a default value and it usually points to the one
shipp
On 27/01/2022 06:00, Glen Huang wrote:
Hi,
I’m trying to create a signed certificate from a CA certificate without
creating a CSR first. From the doc, I came up with this command:
```
openssl req -CA ca.crt -CAkey ca.key -key leaf.key -subj ‘/CN=leaf’ -out
leaf.crt
```
However,
```
opens
