> On Mar 9, 2017, at 6:49 PM, Robert Moskowitz <r...@htt-consult.com> wrote:
>
> I am creating self-signed certs with:
>
> openssl req -new -outform PEM -out certs/$your_host_tld.crt -newkey rsa:2048
> -nodes -keyout private/$your_host_tld.key -keyform PEM -days 3650 -x509
> -extensions v3_req
>
> Where, for example:
>
> your_host_tld=z9m9z.test.htt-consult.com
>
> Thing is that this then prompts for a number of fields
The simplest solution is to set the subject DN explicitly on the command-line:
$ umask 077 # avoid world-readable private keys
$ openssl req -new -newkey rsa:2048 -nodes -keyout
private/$your_host_tld.key \
-x509 -subj "/CN=$(uname -n)" -out certs/$your_host_tld.crt \
-days 3650 -extensions v3_req
Fore more advanced related approaches see:
https://raw.githubusercontent.com/openssl/openssl/master/test/certs/mkcert.sh
--
Viktor.
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
