Hi all:

We were testing PKCS#10 based certificate generation, and we found that configuration value

 preserve        =  no                   # keep passed DN ordering

on file "openca/etc/openssl/openssl.cnf" is not used because it's hardcoded on crypto-utils.lib (line 1250)

 if ( not $token->issueCert(
                      REQFILE     => "$tmpdir/${ser}.req",
                      SUBJECT     => $keys->{SUBJECT},
                      INFORM      => $keys->{FORMAT},
                      EXTFILE     => $keys->{EXTFILE},
                      DAYS        => $days,
                      START_DATE  => $notbefore,
                      END_DATE    => $notafter,
                      PRESERVE_DN => "Y",
                      NOUNIQUEDN  => crypto_is_unique_subject()) )

Is this correct ?

Best regards,

Julio






------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ OpenCA-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to