-
Notifications
You must be signed in to change notification settings - Fork 269
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merge -addext option from upstream #544
Comments
-addext ext
from upstream
Hi, |
Can't use |
Here is temporary workaround to put subjectAltName without -addext option. #!/usr/local/bin/bash
openssl req -newkey rsa:2048 -days 365 -nodes -x509 \
-subj "/C=/ST=/L=/O=/OU=/CN=*.foo.co.uk" \
-extensions SAN \
-config <(cat /etc/ssl/openssl.cnf \
<(printf "[SAN]\nsubjectAltName='DNS:foo.co.uk'")) \
-keyout pkey.pem -out csr.pem |
-addext option was added in upstreram libressl/openbsd@6d41544 |
-extensions is not work with req command. libressl-3.0.2 |
@ip75 works for me...
|
Closing since this will be available in the next release. |
OpenSSL binary
OpenSSL 1.1.1 11 Sep 2018
now supports-addext ext
option, useful to provide a specific extension, like SAN.https://www.openssl.org/docs/man1.1.1/man1/req.html
OpenSSL binary from LibreSSL
LibreSSL 2.9.2
doesn't support it, so it is kinda inconvenient to generate CSR, where LibreSSL is used (OpenBSD, Linux distributions migrated to LibreSSL).Here the command I used to test :
Here the related discussion :
openssl/openssl#3311
Could it possible to merge upstream change to LibreSSL ?
The text was updated successfully, but these errors were encountered: