From: K1 <dongbeiouba@gmail.com>
Date: Thu, 26 Mar 2026 12:14:37 +0000 (+0800)
Subject: Fixed missing subjectAltName when issuing a cert with mkcert.sh genee
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b8df87aca7efa75b3386c237f7a977ef5c6571fc;p=thirdparty%2Fopenssl.git

Fixed missing subjectAltName when issuing a cert with mkcert.sh genee

Just add %s to make subjectAltName appear before [alts].

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Fri Mar 27 16:53:28 2026
(Merged from https://github.com/openssl/openssl/pull/30585)
---

diff --git a/test/certs/mkcert.sh b/test/certs/mkcert.sh
index 1cb4a9000c6..087dc343d77 100755
--- a/test/certs/mkcert.sh
+++ b/test/certs/mkcert.sh
@@ -257,7 +257,7 @@ genee() {
     local cakey=$1; shift
     local ca=$1; shift
 
-    exts=$(printf "%s\n%s\n%s\n%s\n%s\n[alts]\n%s\n" \
+    exts=$(printf "%s\n%s\n%s\n%s\n%s\n%s\n[alts]\n%s\n" \
 	    "subjectKeyIdentifier = hash" \
 	    "authorityKeyIdentifier = keyid, issuer" \
 	    "basicConstraints = CA:false" \