sign-req not honoring --req-c, --req-st, --req-city, ... and falling back to CSR values about easy-rsa HOT 5 CLOSED

My vote is for #995 -- Easy and correct.

Linking: #1089

Linking: #439

from easy-rsa.

Edit: Or add an equivalent to openssl x509 --req --force_pubkey, but that would be way more confusing than just "allowing" these parameters to work also for sign-req as one would expect.

OpenSSL does not work the way you expect.

from easy-rsa.

@TinCanTech That openssl command did what I wanted to do. So maybe my explanation wasn't that great then...

from easy-rsa.

That openssl command did what I wanted to do

If you mean OpenSSL --force_pubkey [sic] then that has nothing to do with EasyRSA --req-* values.

maybe my explanation wasn't that great

I guess not.

from easy-rsa.

sign-req does not honor any Easy-RSA --req-* values because they are only valid in a request context. IE. gen-req.

from easy-rsa.