set subject ""
foreach {attr value} $C(ca-name) { append subject "/$attr=$value" }
exec >@stdout 2>@stderr openssl req -config "etc/openssl.conf" \
- -out "ca.cert" -keyout "private/ca.key" \
+ -text -out "ca.cert" -keyout "private/ca.key" \
-new -x509 -days $C(ca-period) \
-subj $subject
file attributes "ca.cert" \