I run openSuSE 11.1 (uname -a: 2.6.27.19-3.2-pae #1 SMP 2009-02-25 15:40:44 +0100 i686 athlon i386 GNU/Linux) with openssl-0.9.8h-28.7.1. I have created a certification request with # openssl req -new -nodes -keyout test.key -out test.pem Generating a 1024 bit RSA private key ..++++++ .....++++++ writing new private key to 'test.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:CH State or Province Name (full name) [Some-State]:Zuerich Locality Name (eg, city) []:Zuerich Organization Name (eg, company) [Internet Widgits Pty Ltd]:Uni Organizational Unit Name (eg, section) []:test Common Name (eg, YOUR name) []:test.ch Email Address []:test@test.ch Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []:gugus An optional company name []: the command: openssl req -in test.pem -noout -text shows also the following sentence: ... Attributes: challengePassword :unable to print attribute ... With openssl 0.9.8a (SLES10SP2) the challengePassword is printed correctly. Thanks Ulrich Bernhard -- +---------------------------------------------------------+ | Ulrich Bernhard | | Informatikdienste Tel: (+41-44) 635 67 73 | | Universitaet Zuerich Fax: (+41-44) 635 45 05 | | Winterthurerstr. 190 | | CH-8057 Zuerich Email: ulrich.bernhard@id.uzh.ch | | Switzerland | +---------------------------------------------------------+ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org