environment parsing was removed from LibreSSL's libraries. --- examples/generate-csr.sh.orig Thu May 12 01:42:39 2016 +++ examples/generate-csr.sh Fri May 27 10:39:54 2016 @@ -17,7 +17,11 @@ do domains="$domains,DNS:$x" done -SAN="$domains" openssl req -config "${OPENSSL_CNF:-openssl.cnf}" \ +_config=${OPENSSL_CNF:-openssl.cnf} +_conftemp=`mktemp /tmp/generate-csr.cnf.XXXXXXXX` || exit 1 +sed "s%\${ENV::SAN}%$domains%" < $_config > $_conftemp + +openssl req -config "$_conftemp" \ -new -nodes -subj '/' -reqexts san \ -out "${CSR_PATH:-csr.der}" \ -keyout "${KEY_PATH:-key.pem}" \ @@ -25,4 +29,5 @@ SAN="$domains" openssl req -config "${OPENSSL_CNF:-ope -outform DER # 512 or 1024 too low for Boulder, 2048 is smallest for tests +echo rm $_conftemp echo "You can now run: certbot auth --csr ${CSR_PATH:-csr.der}"