![]() ![]() which are the values for Country, State etc. ![]() prompt which prevents OpenSSL prompting you and makes it use the values for Country (C), State (ST) etc.The other two parts of the req section are just pointers to the other two sections in the file. The req sub-command in OpenSSL will look for the req section in the configuration file or fallback to the default section (the first, un-named, section). If we take a sample openssl.cnf file (from creating a CA):ĭistinguished_name = req_distinguished_nameĪuthorityKeyIdentifier=keyid:always,issuer:always Not that that should make your life any easier as the OpenSSL configuration file is a touch baroque and not obviously documented. By default, OpenSSL generates keys and CSRs using the PEM format. Nobody likes typing when they don't have to and everything we've typed so far (well, almost) can be put into a configuration file, all the country locations, common names etc. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2023
Categories |