On Tue, Dec 03, 2013 at 12:29:09PM -0800, Ryan Hurst wrote:

> Cant be done, though most CAs dont use this information from the request.

It can be done in a sense on systems with shells (e.g. bash) that
support command-line ephemeral file-handles.

    $ openssl req -new -config <(
            cat <<-EOF
            [req]
            default_bits = 2048
            prompt = no
            default_md = sha1
            req_extensions = req_ext
            distinguished_name = dn
            [ dn ]
            CN = example.com
            [ req_ext ]
            subjectAltName = ...
            EOF
        ) ...

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to