OpenSSL пользовательский атрибут при создании

Question

во время исполнения:

openssl req -new 

он попросил некоторых атрибутов:

----- 
Country Name (2 letter code) [XX]:IT 
State or Province Name (full name) []:Rome 
Locality Name (eg, city) [Default City]:Rome 
Organization Name (eg, company) [Default Company Ltd]:PP 
Organizational Unit Name (eg, section) []:Information Technology 
Common Name (eg, your name or your server's hostname) []:test 
Email Address []:test at test dot it 

Please enter the following 'extra' attributes 
to be sent with your certificate request 
A challenge password []:claudio 
An optional company name []:cc 

возможно добавить дополнительный пользовательский атрибут при создании?

Спасибо заранее Клаудио

Answer 1

1) login as root 
2) open file openssl.cnf 
3) add your custom attribute in "[new oids]" section 
4) add description in "req_distinguished_name" section 
5) save & close 
6) create your new certificate 

[ new oids] 
newCustom=1.2.3.4.5.6 

[req_distinguished_name] 
newCustom    = new custom attibute 

openssl req -new -key server.key -out server.csr 
nter pass phrase for server.key: 
You are about to be asked to enter information that will be incorporated 
into your certificate request. 
What you are about to enter is what is called a Distinguished Name or a DN. 
There are quite a few fields but you can leave some blank 
For some fields there will be a default value, 
If you enter '.', the field will be left blank. 
----- 
new custom attribute []: 
.. 
.. 
.. 

Я надеюсь, что это может помочь!

С уважением Клаудио