Batoussov Artem wrote: > We are 2 students of a Technical Institute of Telecommunication and Computer > Networks in France.
> We have to realize a draft which is a server of certificate X.509. It must > issue certificates to users who connect to the server. We have a probleme > with the automatic creation of certificates. We recover informations about > the user and we place them in default values for the file .cnf which is used > in the creation of certificates. But when we launch .bat file, the program > stops on fields where normally we must enter information. Do you know the > solution to resolve this problem? Our teacher told us that we can create a > file with 2 page breakes and place the file in the entrance of the command > (openssl req -config user-cert.cnf -key user.key -new -out user.csr) > but when you use -new, it's impossible! Do you know a solution? > We hope you've understood us? Also, can you tell us where we can find a good > documentation about this software and its options. I hope I understand what you are asking for. Under Unix I get variable items into certificates by passing them as environment variables. Here is an example configuration file: ==== # OpenSSL configuration file for signing Internet Server Certificates [req] # openssl req params prompt = no distinguished_name = dn-param [dn-param] # DN fields C = US ST = Maryland O = University of Maryland OU = College Park Campus CN = $ENV::CERTHOST 1.DC = umd 2.DC = edu emailAddress = $ENV::CERTMAIL ==== The prompt=no makes openssl not prompt for information (which I think is one of the problems you are trying to solve?). You didn't say anything about what system you are using, but you did mention a .bat file, which might be an indication of an Evil Microsoft operating system. I'm leaving Saturday for a week on Guadalupe, so I might not get back to this conversation for some time. Bon chance mes amis! -- Charles B. (Ben) Cranston mailto:[EMAIL PROTECTED] http://www.wam.umd.edu/~zben ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
