"Ikbal, Javed" wrote: > > What I want to do: > Create a cert with certain strings in the subjectAltName extension > > What I have tried: > 1. in openssl.cnf, added this line: > [ v3_ca ] > subjectAltName = test Extension string > and ran openssl req -reqexts = v3_ca -newreq ... >
Thats an invalid command syntax it should be openssl req -reqexts v3_ca -newreq ... its also an invalid extension syntax, see doc/openssl.txt > then after combining this with the private key, signed and generated the > cert using CA.pl > Only OpenSSL 0.9.7 will add extension requests to when signing a certificate. Previous versions ignore them. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
