1
vote
Negligible amount of clients in Android/IOS devices getting SSL error
It is unclear what error you exactly get - certificate validation error or some other SSL error. Unless you have more precise information already (in which case you should provide these in your ...
- 198k
1
vote
Accepted
Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?
... and there is no option to just use the public key?
This option exists. As documented you have to use the -pubin argument to specify that the key given with -inkey is a public key. You create the ...
- 198k
1
vote
Subject Alternative Name in Certificate Signing Request apparently does not survive signing
Another option that works well is to use the -copy_extensions option
and the -extensions san option.
Typically, the certificate generation can look like:
openssl x509 -req -days 365 -in ./certs/server....
- 111
Only top scored, non community-wiki answers of a minimum length are eligible