Categories:
Android (13)
Apple Mac (27)
DH Keys (39)
DSA Keys (69)
EC Keys (577)
Firefox (31)
General (12)
Google Chrome (25)
Intermediate CA (152)
Java VM (33)
JDK Keytool (28)
Microsoft CertUtil (29)
Microsoft Edge (9)
Mozilla CertUtil (22)
OpenSSL (237)
Other (7)
Portecle (38)
Publishers (2706)
Revoked Certificates (30)
Root CA (89)
RSA Keys (2231)
Tools (46)
Tutorial (3)
What Is (22)
Windows (129)
Collections:
Other Resources:
OpenSSL "req" - distinguished_name Configuration Section
What is the distinguished_name section in the OpenSSL configuration file?
✍: FYIcenter.com
The distinguished_name section in the OpenSSL configuration file
is a required section of options when using OpenSSL "req -new" or "req -newkey"
commands to generate a new CSR or self-signed certificate.
distinguished_name sections provides options to control the behavior of the following two groups of DN (Distinguished Name) fields.
1. Standard DN fields:
2. Additional DN fields:
There are 2 modes to use when writing distinguished_name section in the configuration file:
1. "prompt=no" mode - This mode tells OpenSSL to not prompt user for distinguished name fields. It will read distinguished_name section as values for DN fields, instead of field prompting labels.
For example: "countryName=US" tells OpenSSL to use "US" as the countryName value.
2. "prompt=yes" mode - This mode tells OpenSSL to prompt user for distinguished name fields. It will read distinguished_name section as prompting labels for DN fields, instead of field values.
For example: "countryName=Country ISO2 Code" tells OpenSSL to use "Country ISO2 Code []:" to prompt the user to enter the countryName value.
⇒ OpenSSL "req" - "prompt=no" Mode
2016-11-02, 14715👍, 0💬
Popular Posts:
What commands are available in the Mozilla "certutil" tool? How to get a list of those commands? If ...
How can I use Microsoft "certutil -verify" command? What are command options supported by "certutil ...
How to list all certificates on my Android device? I want to know what's in the "System" store and w...
Certificate summary - Owner: *.corp.youdao.com, SingleDomain, Netease.com Inc, cn Issuer: CNNIC SSL,...
Do you want to learn how to manage certificates for Mozilla Firefox on Windows? Here is a collection...