Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

sign-req: Option 'comply', certificate subject will comply with CA #995

Closed
wants to merge 1 commit into from
Closed

sign-req: Option 'comply', certificate subject will comply with CA #995

wants to merge 1 commit into from

Commits on Aug 7, 2023

  1. sign-req: Option 'comply', certificate subject will comply with CA 

    If a request file is received with unsuitable subject fields then
force the signed certificate to comply with the subject fields of
the CA certificate.

This is achieved as follows:

In DN mode 'cn_only', only the commonName can be changed. Use global
option --req-cn='new-name' and sign-req command option 'comply' to
force the commanName field to be changed.

In DN mode 'org', all the fields can be changed. Use global options
--req-*='new value' and sign-req command option 'comply' to force
all the fields to comply.  All fields not explicitly specified are
loaded from the vars file, which will be configured in 'org' mode.

The signed certificate output-file will retain the file-name-base
of the original request-file, to maintain compatibility with the
commands 'revoke' and 'renew'.

Signed-off-by: Richard T Bonhomme <[email protected]>
    @TinCanTech
    TinCanTech committed Aug 7, 2023
    Configuration menu
    Copy the full SHA
    4266f06 View commit details
    Browse the repository at this point in the history