Re: [openssl-users] Cant seem to get prompt no to work

2017-08-19 Thread Robert Moskowitz
On 08/19/2017 04:00 AM, Peter Sylvester wrote: On 08/18/2017 07:16 PM, Dr. Stephen Henson wrote: On Thu, Aug 17, 2017, Robert Moskowitz wrote: In the [ ca ] section I have: prompt = no If I leave the = out I get an error, so I am assuming I got the format of this right. Then I have [

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-19 Thread Peter Sylvester
On 08/18/2017 07:16 PM, Dr. Stephen Henson wrote: > On Thu, Aug 17, 2017, Robert Moskowitz wrote: > >> In the [ ca ] section I have: >> >> prompt = no >> >> If I leave the = out I get an error, so I am assuming I got the >> format of this right. >> >> Then I have >> >> [ req ] >>

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-18 Thread Robert Moskowitz
On 08/18/2017 01:16 PM, Dr. Stephen Henson wrote: On Thu, Aug 17, 2017, Robert Moskowitz wrote: In the [ ca ] section I have: prompt = no If I leave the = out I get an error, so I am assuming I got the format of this right. Then I have [ req ] distinguished_name =

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-18 Thread Dr. Stephen Henson
On Thu, Aug 17, 2017, Robert Moskowitz wrote: > In the [ ca ] section I have: > > prompt = no > > If I leave the = out I get an error, so I am assuming I got the > format of this right. > > Then I have > > [ req ] > distinguished_name = req_distinguished_name > > [ req_distinguished_name

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 07:01 PM, Jakob Bohm wrote: On 18/08/2017 00:09, Robert Moskowitz wrote: On 08/17/2017 05:38 PM, Salz, Rich wrote: declare -x organizationalUnitName="" routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 You are setting an empty OU. You should not set

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Jakob Bohm
On 18/08/2017 00:09, Robert Moskowitz wrote: On 08/17/2017 05:38 PM, Salz, Rich wrote: declare -x organizationalUnitName="" routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 You are setting an empty OU. You should not set it and see if that works

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 05:38 PM, Salz, Rich wrote: declare -x organizationalUnitName="" routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 You are setting an empty OU. You should not set it and see if that works organizationalUnitName = "." puts a . in it. So I have to

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
ARGH!!! On 08/17/2017 05:38 PM, Salz, Rich wrote: declare -x organizationalUnitName="" routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 You are setting an empty OU. You should not set it and see if that works So now I have to figure out how to handle an empty

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Salz, Rich via openssl-users
> declare -x organizationalUnitName="" > routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 You are setting an empty OU. You should not set it and see if that works -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 04:17 PM, Robert Moskowitz wrote: On 08/17/2017 04:09 PM, Salz, Rich wrote: Use the –batch flag to avoid all prompting I commented out the prompt line and tried again: openssl req -config openssl-root.cnf -key private/ca.key.pem \ > -new -x509 -days 7300 -sha256

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 04:17 PM, Robert Moskowitz wrote: On 08/17/2017 04:09 PM, Salz, Rich wrote: Use the –batch flag to avoid all prompting I commented out the prompt line and tried again: openssl req -config openssl-root.cnf -key private/ca.key.pem \ > -new -x509 -days 7300 -sha256

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 04:09 PM, Salz, Rich wrote: Use the –batch flag to avoid all prompting I commented out the prompt line and tried again: openssl req -config openssl-root.cnf -key private/ca.key.pem \ > -new -x509 -days 7300 -sha256 -batch -extensions v3_ca -out certs/ca.cert.pem Enter

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Salz, Rich via openssl-users
Use the –batch flag to avoid all prompting -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Robert Moskowitz
On 08/17/2017 03:39 PM, Salz, Rich via openssl-users wrote: In the CA section, you have to specify which fields you need/want in the DN. This is the “policy” identifier which points to a section that names the RDN’s you want/need. I have that: [ ca ] # `man ca` default_ca = CA_default [

Re: [openssl-users] Cant seem to get prompt no to work

2017-08-17 Thread Salz, Rich via openssl-users
In the CA section, you have to specify which fields you need/want in the DN. This is the “policy” identifier which points to a section that names the RDN’s you want/need. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users