Re: [openssl-users] Env variables in config file to add a whole line

2017-09-06 Thread Jakob Bohm
On 06/09/2017 19:34, Robert Moskowitz wrote: On 09/06/2017 01:31 PM, Salz, Rich via openssl-users wrote: … $crlDP $ocspIAI This is not supported.  You can only put variables in *values* OK.  But now I have to work out values. Bob As previously, have a set of "certificate prof

Re: [openssl-users] Env variables in config file to add a whole line

2017-09-06 Thread Robert Moskowitz
On 09/06/2017 01:31 PM, Salz, Rich via openssl-users wrote: … $crlDP $ocspIAI This is not supported. You can only put variables in *values* OK. But now I have to work out values. Bob -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo

Re: [openssl-users] Env variables in config file to add a whole line

2017-09-06 Thread Salz, Rich via openssl-users
… $crlDP $ocspIAI This is not supported. You can only put variables in *values* -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Env variables in config file to add a whole line

2017-09-06 Thread Robert Moskowitz
I got past the error to build the CSR by using: crlDistributionPoints = $ENV::crlDP authorityInfoAccess = $ENV::ocspIAI Just $crlDP failed even though I had this defined in the [ca} section. The CSR does not use the user_cert or server_cert. This was 'just' a config file syntax issue. When I

[openssl-users] Env variables in config file to add a whole line

2017-09-06 Thread Robert Moskowitz
I am trying to use an environment variable to add a whole line to the config file. This is to control adding (or not providing) CRL and/or OCSP support. export shows: declare -x crlDP="crlDistributionPoints = URI:http://www.htt-consult.com/pki/intermediate.crl.pem"; declare -x default_crl_d