openssl req -in pkcs10receivedfromclient.csr -config configfilewithDN.cnf -out pkcs10withNewDN.csr is ignoring the DN in the config file. The pkcs10receivedfromclient.csr has "DC=COM" and configfilewithDN.cnf has [ req ] ... distinguished_name = req_distinguished_name [ req_distinguished_name ] DC = COM O = CAer OU = Root CA Services CN = userX My intention is to obtain the public key from the PKCS10 received from the client, but supply/modify the DN at the openssl server. Can anyone suggest how I can achieve this ? Anyhow ? Please help ! Regards, Sandipan ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]