> On Dec 28, 2017, at 4:34 PM, Dmitry Belyavsky <beldmit@xxxxxxxxx> wrote: > > Great news! > Does it work for certificates too? The updated documentation says: +=item B<-addext ext> + +Add a specific extension to the certificate (if the B<-x509> option is +present) or certificate request. The argument must have the form of +a key=value pair as it would appear in a config file. + +This option can be given multiple times. So it should work for "openssl req -x509". There should probably be corresponding changes for "openssl x509 -req", which can be used for more than just self-signed certs. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
