tree 42b0f5817207365a6bb2db8a68da4b6c6b2e7dd6
parent 8bfb7506d210841f2ee4eda8afe96441a0e33fa5
author Hugo Landau <hlandau@openssl.org> 1646139303 +0000
committer Tomas Mraz <tomas@openssl.org> 1646299311 +0100

Enable openssl req -x509 to create certificates from CSRs

`openssl req -x509` has code allowing it to generate certificates from CSRs
as a replacement for `openssl x509`, but a bug prevents it from working
properly. -CA and -CAkey can now be passed to generate a CA-signed
certificate as documented in openssl-req(1).

Regression testing has been added to `openssl req`.

Fixes #17736.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17782)