On Fri, Apr 26, 2002 at 12:38:05PM +0200, Robert Joop wrote:
> `x509 -noout -text` prints inconsistent output.
>
> ...> openssl x509 -noout -text -in old.pem | grep Issuer:
> Issuer: [EMAIL PROTECTED], CN=CA UCO, O=Universidad de Cordoba, C=ES
> ...> openssl x509 -noout -text -in new.pem | grep Issuer:
> Issuer: C=ES, O=Universidad de Cordoba, CN=AC [EMAIL PROTECTED]
>
> see the "/" that magically appears, instead of a ", "?
> if found the place that does this magic and commented it out:
>
> ...> openssl x509 -noout -text -in old.pem | grep Issuer:
> Issuer: [EMAIL PROTECTED], CN=CA UCO, O=Universidad de Cordoba, C=ES
> ...> openssl x509 -noout -text -in new.pem | grep Issuer:
> Issuer: C=ES, O=Universidad de Cordoba, CN=AC UCO, [EMAIL PROTECTED]
>
> it does it because the type "emailAddress" starts lower case!
Your analysis is technically correct. If the object name is starting with
an uppercase letter, the "/" is replaced with the ", ", otherwise it is
not.
However: the section you are essentially removing (by commenting out)
may be there for a reason. I have not used this functionality myself,
so I don't know why this distinction is made. Therefore I am reluctant
to touch it. Steve, could you kindly have a look into this?
> --- orig/openssl-SNAP-20020423/crypto/asn1/t_x509.c Wed Feb 13 20:00:30 2002
> +++ openssl-SNAP-20020423/crypto/asn1/t_x509.c Fri Apr 26 11:50:13 2002
> @@ -460,12 +461,12 @@
> for (;;)
> {
> #ifndef CHARSET_EBCDIC
> - if ( ((*s == '/') &&
> + if ( ((*s == '/') /*&&
> ((s[1] >= 'A') && (s[1] <= 'Z') && (
> (s[2] == '=') ||
> ((s[2] >= 'A') && (s[2] <= 'Z') &&
> (s[3] == '='))
> - ))) ||
> + ))*/) ||
> (*s == '\0'))
> #else
> if ( ((*s == '/') &&
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
