I recommend to stay away from openssl.cnf and create your own config files. You 
may find http://pki-tutorial.readthedocs.org/ useful as it provides plenty of 
example configs. And no, you cannot prompt for a SAN, but you can use an 
environment variable which is almost as good.

Cheers,
Stefan

On 28.10.2014, at 23:08, Mik J wrote:

> I've read numerous webpages but I still don't understand many things on how 
> to get it working properly.

-- 
Stefan H. Holek
ste...@epy.co.at

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to