Hi! Following the example on https://man.openbsd.org/ikectl, I
# ikectl ca test create ...and then # ikectl ca test certificate sub.domain.com create ...filled out "the form", but after that... Using configuration from /etc/ssl/test/sub.domain.com-ssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'SE' organizationName :ASN.1 12:'cppm' commonName :ASN.1 12:'sub.domain.com' emailAddress :IA5STRING:'webmas...@domain.com' ERROR: adding extensions in section x509v3_FQDN 2198743120:error:22FFF06D:X509 V3 routines:func(4095):invalid null value:/usr/src/lib/libcrypto/x509v3/v3_utl.c:355: 2198743120:error:22FFF069:X509 V3 routines:func(4095):invalid extension string:/usr/src/lib/libcrypto/x509v3/v3_conf.c:143:name=subjectAltName,section=DNS: 2198743120:error:22FFF080:X509 V3 routines:func(4095):error in extension:/usr/src/lib/libcrypto/x509v3/v3_conf.c:96:name=subjectAltName, value=DNS: I'm probably doing something stupid, so if anyone can point me in the right direction, that would be highly appreciated. BR Andreas
