> [[email protected] - Sun Dec 26 20:59:33 2010]: > > openssl-0.9.8q: crypro/x509v3/v3_purp.c:667 > > > X509_get_issuer_name(issuer) means issuer's issuer, I think the > correct code is > > > if(nm && X509_NAME_cmp(nm, X509_get_subject_name(issuer))) > return X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH; > } >
The OpenSSL code is correct, see: http://www.openssl.org/support/faq.html#USER15 Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
