Well I provided a windows example of the same approach but it's not purely from 
the command line.

Ryan Hurst

Sent from my phone, please forgive the brevity.

> On Dec 3, 2013, at 5:20 PM, Viktor Dukhovni <openssl-us...@dukhovni.org> 
> wrote:
> 
>> On Tue, Dec 03, 2013 at 12:29:09PM -0800, Ryan Hurst wrote:
>> 
>> Cant be done, though most CAs dont use this information from the request.
> 
> It can be done in a sense on systems with shells (e.g. bash) that
> support command-line ephemeral file-handles.
> 
>    $ openssl req -new -config <(
>        cat <<-EOF
>        [req]
>        default_bits = 2048
>        prompt = no
>        default_md = sha1
>        req_extensions = req_ext
>        distinguished_name = dn
>        [ dn ]
>        CN = example.com
>        [ req_ext ]
>        subjectAltName = ...
>        EOF
>    ) ...
> 
> -- 
>    Viktor.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to