Peter 'Luna' Runestig wrote:
>
> Hi all,
>
> When you do a
>
> $ openssl x509 -text < cert.pem
>
> the format of the subject and issuer lines is a mix of "old" and "new"
> styles, like this:
>
> Subject: C=SE, L=Bollnaes, CN=Peter 'Luna'
> [EMAIL PROTECTED]/UID=luna
>
> This happens for every "object short name" that is longer than two
> chars.
> Here is a patch to make it print like this:
>
> Subject: C=SE, L=Bollnaes, CN=Peter 'Luna' Runestig,
> [EMAIL PROTECTED], UID=luna
>
X509_NAME_print() is obsolete. It is only retained and is the default
'x509' option because certain software (IMHO wrongly) relies on the
format it produces.
X509_NAME_print_ex() is its replacement. There are various options to
x509 that can change the format for example: "-nameopt oneline"
"-nameopt multiline". At some point one of these should be made the
default and the old format only selectable with "-nameopt compat".
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
