I recommend to stay away from openssl.cnf and create your own config files. You may find http://pki-tutorial.readthedocs.org/ useful as it provides plenty of example configs. And no, you cannot prompt for a SAN, but you can use an environment variable which is almost as good.
Cheers, Stefan On 28.10.2014, at 23:08, Mik J wrote: > I've read numerous webpages but I still don't understand many things on how > to get it working properly. -- Stefan H. Holek ste...@epy.co.at ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org