Repos-que-me-gustan/the-book-of-secret-knowledge-copy
1
0
Fork 0
Code Pull Requests Activity

update 'Generate CSR with -config param'

Browse Source 
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray 2019-07-17 13:38:14 +02:00
parent 2da46678c4
commit 55390348db
1 changed files with 27 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
README.md
View File

@ -2214,19 +2214,19 @@ openssl req -new -sha256 -key ${_fd} -out ${_fd_csr} \
-config <( -config <(
cat <<-EOF cat <<-EOF
[req] [req]
default_bits = 2048 default_bits = 2048
prompt = no default_md = sha256
default_md = sha256 prompt = no
req_extensions = req_ext distinguished_name = dn
distinguished_name = dn req_extensions = req_ext
[ dn ] [ dn ]
C=<two-letter ISO abbreviation for your country> C = "<two-letter ISO abbreviation for your country>"
ST=<state or province where your organization is legally located> ST = "<state or province where your organisation is legally located>"
L=<city where your organization is legally located> L = "<city where your organisation is legally located>"
O=<legal name of your organization> O = "<legal name of your organisation>"
OU=<section of the organization> OU = "<section of the organisation>"
CN=<fully qualified domain name> CN = "<fully qualified domain name>"
[ req_ext ] [ req_ext ]
subjectAltName = @alt_names subjectAltName = @alt_names
@ -2239,6 +2239,22 @@ EOF
)) ))
``` ```
Other values in `[ dn ]`:
> Look at this great explanation: [How to create multidomain certificates using config files](https://apfelboymchen.net/gnu/notes/openssl%20multidomain%20with%20config%20files.html)
```
countryName = "DE" # C=
stateOrProvinceName = "Hessen" # ST=
localityName = "Keller" # L=
postalCode = "424242" # L/postalcode=
streetAddress = "Crater 1621" # L/street=
organizationName = "apfelboymschule" # O=
organizationalUnitName = "IT Department" # OU=
commonName = "example.com" # CN=
emailAddress = "webmaster@example.com" # CN/emailAddress=
```
###### List available EC curves ###### List available EC curves
```bash ```bash