Hi all:

We were testing PKCS#10 based certificate generation, and we found that configuration value

  preserve        =  no                   # keep passed DN ordering

on file "openca/etc/openssl/openssl.cnf" is not used because it's hardcoded on crypto-utils.lib (line 1250)

  if ( not $token->issueCert(
                       REQFILE     => "$tmpdir/${ser}.req",
                       SUBJECT     => $keys->{SUBJECT},
                       INFORM      => $keys->{FORMAT},
                       EXTFILE     => $keys->{EXTFILE},
                       DAYS        => $days,
                       START_DATE  => $notbefore,
                       END_DATE    => $notafter,
                       PRESERVE_DN => "Y",
                       NOUNIQUEDN  => crypto_is_unique_subject()) )

Is this correct ?

Best regards,

Julio



-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to