OpenSSL：如何创建主题为空的证书？

Question

我需要生成带有空主题字段的证书。我尝试使用配置：

[ req ]
default_bits                            = 1024                  # Size of keys
default_md                              = md5                           
algorithm
string_mask                             = nombstr               # permitted characters
#string_mask                            = pkix          # permitted characters
distinguished_name                      = req_distinguished_name
req_extensions                          = v3_req

[ policy_match ]
commonName              = optional
countryName             = optional
emailAddress            = optional

[ req_distinguished_name ]
# Variable name                         Prompt string
#-------------------------        ----------------------------------
0.organizationName                      = Organization Name (company)
organizationalUnitName                  = Organizational Unit Name (division)
localityName                            = Locality Name (city, district)
stateOrProvinceName                     = State or Province Name (full name)
countryName                             = Country Name (2 letter code)
commonName                              = Common Name (hostname, IP, or your name)
0.organizationName_default              = 
localityName_default                    = 
stateOrProvinceName_default             = 
countryName_default                     = 
emailAddress_default                    = 

[ v3_req ]
basicConstraints                        = CA:FALSE
subjectKeyIdentifier                    = hash
subjectAltName                          = critical,DNS:example3.com

但得到：

Organization Name (company) []:
Organizational Unit Name (department, division) []:
Locality Name (city, district) []:
State or Province Name (full name) []:
Country Name (2 letter code) []:
Common Name (hostname, IP, or your name) []:
error, no objects specified in config file
problems making Certificate Request

我在这里发现了同样的问题：https : //superuser.com/questions/512673/openssl-how-to-create-a-certificate-with-an-empty-subject-dn

但没有解决办法。当我输入时输入（空字段）我收到这个错误：错误，配置文件中没有指定对象

你能帮忙吗 ？如何生成主题名称为空的 CSR？

谢谢

Answer 1

我发现，如果我在至少一个提示中输入一些内容，我就不会收到错误，并且会创建 csr 文件。

Country Name (2 letter code) []:US                        <-- only entered this
State or Province Name (full name) []:
Locality Name (eg, city) []:
Organization Name (eg, company) []:
Organizational Unit Name (eg, section) []: 
Common Name (eg, fully qualified host name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: