Hi all,
I've maid modifications to my apps/req.c file so that I can do batch
certificate request without openssl config file.
My new command line and the output stream look's like:
C:\>openssl req -subj "/CN=test/streetAddress=rue st
sebastien/L=LILLE/ST=FRANCE" -newkey rsa:1024 -passin pass:test -sha256
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.....++++++
................................++++++
writing new private key to stdout
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,7E17700076B3C0C8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-----END RSA PRIVATE KEY-----
-----
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
The modifications are quiet simples, have a look on the diff:
$ diff req.c req.old
582,583c582,590
< if (req_conf != NULL && verbose)
< BIO_printf(bio_err,"Using configuration from
%s\n",default_config_file);
---
> if (req_conf == NULL)
> {
> BIO_printf(bio_err,"Unable to load config info from
%s\n", default_config_file);
> if (newreq)
> goto end;
> }
> else if( verbose )
> BIO_printf(bio_err,"Using configuration from %s\n",
> default_config_file);
750a758
>
759d766
<
836c843
< if
(!PEM_write_bio_PrivateKey(out,pkey,cipher,passin,0,NULL,passout))
---
> if
(!PEM_write_bio_PrivateKey(out,pkey,cipher,NULL,0,NULL,passout))
1206c1213
< if (dn_sect == NULL && subj==NULL)
---
> if (dn_sect == NULL)
1213c1220
< if (dn_sk == NULL && subj==NULL)
---
> if (dn_sk == NULL)
1220c1227
< if (attr_sect == NULL && subj==NULL)
---
> if (attr_sect == NULL)
1228c1235
< if (attr_sk == NULL && subj==NULL)
---
> if (attr_sk == NULL)
May it be usefull to add this modifications in the next release ?
Best regards,
Arnaud Grandville
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
