openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey
new.cert.key -days 365
You need to explicitly tell it to use extensions by using "-extensions v3_req". I do not know if it is possible to set defaults in openssl.cnf here.
(I also tried the solution suggested above and the -extensions v3_req param. It doesn't work)
It does. I usually test things before explicitly recommend them.
How do you check it? I execute: # openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey new.cert.key -days 365 -extensions v3_req and then these commands for checking: # openssl x509 -in new.cert.cert -text -noout or # openssl x509 -in new.cert.cert -subject -noout and I don't see the extensions. Do you? How do you see them? Thanks in advance, Andrei. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org