On 07/17/2014 12:03 AM, Viktor Dukhovni wrote: > You've declared "-days" to take only positive numbers, it should > allow negative numbers.
why? Or at least: why accept these generally unacceptable options by default? I can understand wanting to be able to create perverse certificates to test validation stacks, but i don't think that the command line tool used by many people to create certs should be willing to create known bad certs without explicitly overriding a warning or something. --dkg
signature.asc
Description: OpenPGP digital signature