Hi Giacomo,

Ubuntu 11.10 was the first release to include openssl 1.0. With openssl
1.0, upstream changed the hash algorithm used when hashing the subject
of a certificate. You can generate the hash with the old algorithm with
the -subject_hash_old argument to the x509 command; e.g. on Ubuntu
11.10:

  $ /usr/bin/openssl x509 -subject_hash -noout -in /etc/ssl/certs/5ed36f99.0
  99d0fa06
  $ /usr/bin/openssl x509 -subject_hash_old -noout -in /etc/ssl/certs/5ed36f99.0
  5ed36f99

This is mentioned in the x509(1) manpage.

Thanks! Please feel free to report any other issues you find in Ubuntu.

** Visibility changed to: Public

** Changed in: openssl (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/918695

Title:
  "openssl x509 -hash" gves a wrong result

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/918695/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to