On Wed, Jul 05, 2023 at 01:05:04PM -0400, Robert Moskowitz wrote:
> no on -addext:
>
> openssl req -config $dir/openssl-root.cnf -reqexts req_ext_bk\
> -addext "subjectAltName = email:rgm@xxxxxxxxxxx"\
> -key $dir/private/$clientemail.key.$format \
> -subj "$DN" -new -out $dir/csr/$clientemail.csr.$format
Yes, "-reqexts" (intentionally or otherwise) supresses "addext".
Perhaps open an issue, to see whether this is a documentation deficiency
(intentional) or a bug.
--
Viktor.
