Estou tentando fazer coisas do servidor (cert, req, key) com a ferramenta easy-rsa:
./easyrsa build-server-full srv_name nopass
Using configuration from ./openssl-1.0.cnf
Enter pass phrase for /var/services/homes/admin/easyrsa3/pki/private/ca.key:
Check that the request matches the signature Signature ok
The Subject's Distinguished Name is as follows commonName
:ASN.1 12:'srv_name'ERROR: adding extensions in section default 1073879248:error:22097082:X509 V3 routines:DO_EXT_NCONF:unknown extension name:v3_conf.c:125:
1073879248:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:95:name=copy_extensions, value=copy
Na verdade, o easy_rsa está tentando:
openssl ca -utf8 -in /var/services/homes/admin/easyrsa3/pki/reqs/srv_name.req -out /var/services/homes/admin/easyrsa3/pki/issued/srv_name.crt.Cdgy3Ao8QP -config ./openssl-1.0.cnf -extfile /var/services/homes/admin/easyrsa3/pki/extensions.temp -days 3650 -batch
O que há de errado com copy_extensions? Meu openssl simplesmente não tem isso?