diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index d45d27c35..061171a76 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -2290,6 +2290,15 @@ sign_req() {
 	crt_type="$1"
 	file_name_base="$2"
 
+	# Verify $crt_type is valid
+	case "$crt_type" in
+		ca|server|serverClient|client|codeSigning|email|kdc)
+			: # All known types plus CA for self-sign
+		;;
+		*)
+			user_error "Type is not recognised: '$crt_type'"
+	esac
+
 	# Check argument sanity:
 	[ "$file_name_base" ] || user_error "\
 Incorrect number of arguments provided to sign-req: