create self-signed cert with config file

I'm trying to create a self-signed certificate/private key pair with the
`openssl` command-line tool, v1.1.1.  There is the usual example:

  openssl req -x509 -newkey rsa:2048 -keyout foo.key -out foo.crt

and I can add -addext 'subjectAltName=...' too.  I opened the resulting .crt
file in Mozilla and verified that it's a CA cert.

But I'd like to use -config to avoid being prompted for the DN fields.  (I'm
doing this repetitively.)  When I try 

  openssl req -x509 -config foo.conf -out foo.crt

moving as much as I can into the .conf file, the resulting .crt is missing
fields that I saw with the usual command line.  It doesn't appear to be a CA
cert at all.  The SAN fields are missing.

I'm also surprised that not all command-line options have config equivalents:
-days, for instance.

Is there a way to do this?

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/aDaT95FjNbv4O0GE%4070-36-235-101.dsl.static.fusionbroadband.com.