On Mon, Mar 07, 2005, Lee Jenkins wrote: > > > You can do the whole thing in a single command by using the -x509 > > option to > > 'req'. You might want to use alternative extensions though > > because that will > > use CA ones by default. > > Could I impose upon your for an example? >
If you do: openssl req -x509 -new -out cert.pem -keyout key.pem that will create a certificate and key with the CA extensions in openssl.cnf. These are in the section 'v3_ca'. An alternative is to use the certificate extensions in the section v3_usr. This can be done with: openssl req -x509 -new -out cert.pem -keyout key.pem -extensions usr_cert Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
