Another problem. It is almost like it is not reading the CA selction?
openssl ca -config $dir/openssl-8021AR.cnf -extensions 8021ar_idevid
-notext -md sha256 \
-in $dir/csr/$DevID.csr.pem -out $dir/certs/$DevID.cert.pem
processes the default_enddate
default_enddate= 99991231235959Z # per IEEE 802.1AR
to produce:
Not Before: Aug 29 21:19:33 2017 GMT
Not After : Dec 31 23:59:59 9999 GMT
But
openssl x509 -req -extfile $dir/openssl-8021AR.cnf\
-extensions 8021ar_idevid -days 365 -sha256\
-set_serial 0x$(openssl rand -hex $sn)\
-inform $format -in $dir/csr/$DevID.csr.$format\
-outform $format -out $dir/certs/$DevID.cert.$format\
-CAkeyform $format -CAkey
$dir/private/8021ARintermediate.key.$format\
-CAform $format -CA $dir/certs/8021ARintermediate.cert.$format
does not. Even if I leave out the -days option.
I am thinking, do I need to use:
-extensions ca 8021ar_idevid
?? but that will probably be a syntax error.
thanks
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
