On Tue, Dec 03, 2013 at 12:29:09PM -0800, Ryan Hurst wrote: > Cant be done, though most CAs dont use this information from the request.
It can be done in a sense on systems with shells (e.g. bash) that support command-line ephemeral file-handles. $ openssl req -new -config <( cat <<-EOF [req] default_bits = 2048 prompt = no default_md = sha1 req_extensions = req_ext distinguished_name = dn [ dn ] CN = example.com [ req_ext ] subjectAltName = ... EOF ) ... -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org