On Mon, Nov 24, 2003, Michael Bell wrote: > Hi, > > some people ask me how to create the following subject for certificates: > > cn=abc + serialNumber=123,o=company,c=de > > It is no problem to insert this subject to the -subj option of "openssl > ca" but the sourcecode looks like OpenSSL ca uses "abc + > serialNumber=123" as value. Is this correct and if yes is there a way to > issue certificates with mutlivalued attributes in RDNs? >
Yes but you need OpenSSL 0.9.8-dev for this. It doesn't (yet) work with -subj but if you use the config file for 'req' and make the first character of a DN component '+' it should create a multivalued RDN correctly. The default (alas broken) DN print options don't display this properly. If you use some other option like -nameopt oneline then it should be displayed approptiately. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
