RE: change in x509 -CA in 1.0.1?: doesn't encode new Issuer

2013-04-11 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Salz, Rich Sent: Tuesday, 09 April, 2013 12:55 -dev added, I think this is a bug This pair of commands used to work as expected, but in 1.0.0 and later the resulting cert is self-signed, and not signed by the CA key. ITYM 1.0.1 as per subject.

change in x509 -CA in 1.0.1?

2013-04-09 Thread Salz, Rich
One of our developers here has noticed a change in behavior. This pair of commands used to work as expected, but in 1.0.0 and later the resulting cert is self-signed, and not signed by the CA key. openssl req -x509 -days 999 -keyout req.key -out req.pem \ -subj /CN=testme -nodes