Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am making a self signed certificate using OpenSSL. I want to make the certificate in one go, means that it will not ask me for the input for Company Name, Common Name etc etc. Is there anyway to do this like a switch e.g. /noprompt or any other through which I can input my all fields in one go. Is it possible that the following command takes all arguments in this call which it takes after pressing enter

openssl x509 -req -days 30 -in request.pem -signkey key.pem -out certificate.pem
share|improve this question

migrated from stackoverflow.com Jun 24 '10 at 0:07

2 Answers

You need to specify the subject as part of your command.

This command is one step, non-interactive, self-signed certificate creation.

openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/C=US/ST=Denial/L=Springfield/O=Dis/CN=www.example.com" -keyout www.example.com.key  -out www.example.com.cert
share|improve this answer
Brilliant. I didn't know about the non-interactive component and it's exactly what I need to provision a Vagrant VM. – Rob Wilkerson Feb 2 at 19:16

You can fill a file beforehand to automate the process of creating certificates, in the section named:

"Sample configuration file prompting for field values"

Link: http://www.openssl.org/docs/apps/req.html#EXAMPLES

share|improve this answer
Even with that file, the user still has to hit return to confirm each automated value – Gearoid Murphy Dec 4 '12 at 15:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.