On Thu, Jan 14, 2016 at 01:08:02PM +0000, Gareth Williams wrote: > On Thursday 14 January 2016 10:59:01 Mauro Romano Trajber wrote: > > Could you send me the ca command line? There's any way to run it without > > creating a .cnf - using only <(print notation? > > To be honest, I don't know whether you could run it purely from the command > line without a config file as there are many configuration options needed to > operate openssl as a CA. Saying that, defaults values may work for many of > those. That's what the script I posted does, it bypasses all the bagage of .cnf files and a stateful CA, by constructing miniature ".cnf" files on the fly via <(printf ....). So yes, this can be done. -- Viktor.