On Freitag, 20. September 2002 00:43, vze2ksv3 wrote:
> Hi,
>
> I have downloaded openssl-engine-0.9.6g
>
> I try to run openssl ca -policy policy_anthing -out newcert.pem -passin
> pass:whatever -key whatever
> -extensions xpclient_ext -extfile xpextensions \
> -infiles newreq.pem
>
> It complains that -extfile is not "ca"'s arg.
> but I check www.openssl.org/docs/apps/ca.html
> "-extfile" is described there.
from CHANGES :
...
Changes between 0.9.6g and 0.9.7 [XX xxx 2002]
...
*) New '-extfile ...' option to 'openssl ca' for reading X.509v3
extensions from a separate configuration file.
As when reading extensions from the main configuration file,
the '-extensions ...' option may be used for specifying the
section to use.
[Massimiliano Pala <[EMAIL PROTECTED]>]
...
=> it's a new feature in OpenSSL > 0.9.7
>
> Do you have to do something on openssl.cnf to enable that option?
try OpenSSL 0.9.7 ;-)
Regards,
Nils
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
