OpenSSL "req" - distinguished_name Configuration Section
What is the distinguished_name section in the OpenSSL configuration file?
The distinguished_name section in the OpenSSL configuration file is a required section of options when using OpenSSL "req -new" or "req -newkey" commands to generate a new CSR or self-signed certificate.
distinguished_name sections provides options to control the behavior of the following two groups of DN (Distinguished Name) fields.
1. Standard DN fields:
2. Additional DN fields:
There are 2 modes to use when writing distinguished_name section in the configuration file:
1. "prompt=no" mode - This mode tells OpenSSL to not prompt user for distinguished name fields. It will read distinguished_name section as values for DN fields, instead of field prompting labels.
For example: "countryName=US" tells OpenSSL to use "US" as the countryName value.
2. "prompt=yes" mode - This mode tells OpenSSL to prompt user for distinguished name fields. It will read distinguished_name section as prompting labels for DN fields, instead of field values.
For example: "countryName=Country ISO2 Code" tells OpenSSL to use "Country ISO2 Code :" to prompt the user to enter the countryName value.
2016-11-02, 3846👍, 0💬
How to use the "keytool -list" command? I want to see what in the keystore file. Here is an example ...
How to use the "keytool -printcertreq" command? I received a CSR (Certificate Signing Request) file ...
Certificate summary - Owner: GeoTrust DV SSL CA, Domain Validated SSL, GeoTrust Inc., US Issuer: Geo...
How to download JDK 1.7 for Windows? I want to use the Keytool included in the JDK to generate keys ...
Certificate Summary: Subject: AddTrust Class 1 CA Root Issuer: AddTrust Class 1 CA Root Expiration: ...