Steffen DETTMER wrote: > * Arno Garrels wrote on Sun, Oct 11, 2009 at 16:10 +0200: >>>> Why are issuers looked up by subject at all? >>>> >>> >>> Because that's what the standards (X.509, RFC3280 et al) require. >> >> Ah ok, but shouldn't name duplicates be taken into account when >> issuers are looked up, even though that might result in worse >> performance? > > I guess having duplicated Distinguished Names is wrong.
If so, I wonder why both Firefox and Windows handle this case w/o a problem? Firefox doesn't ship with the VeriSign dups, importing them however works fine. -- Arno Garrels ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
