> On Aug 16, 2017, at 12:52 PM, Robert Moskowitz <rgm@xxxxxxxxxxxxxxx> wrote: > > Which is also a problem in openssl. You have to put the SAN into the cnf file. There are a number of hacks to do this from the command line. Yep. For an approach that uses "bash" in-line files see: https://github.com/openssl/openssl/blob/master/test/certs/mkcert.sh#L95 -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users