Re: x509: recent change in Subject and Issuer printing?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 04/03/18 02:22, Adam Shannon wrote:
> Was there a change included in the 1.1.0 series which prints names
> differently? I've looked, but been unable to narrow down what in
> specific changed.

This was changed by commit f1cece554d.

The default "nameopt" setting for the x509 app (and a few others)
changed from "compat" to "oneline". See the man page here for
descriptions of these options:

https://www.openssl.org/docs/man1.1.0/apps/x509.html

If you add "-nameopt compat" to your 1.1.0 command line you should see
the old behaviour.

Matt



> 
> $ /usr/local/opt/openssl/bin/openssl version
> OpenSSL 1.0.2n  7 Dec 2017
> 
> $ /usr/local/opt/openssl/bin/openssl x509 -in thawte.pem -noout -text |
> grep -E 'Issuer:|Subject:'
>         Issuer: C=US, O=thawte, Inc., OU=Certification Services
> Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte
> Primary Root CA
>         Subject: C=US, O=Thawte, Inc., CN=Thawte SSL CA
> 
> $ openssl version
> OpenSSL 1.1.0f  25 May 2017
> 
> $ openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
>         Issuer: C = US, O = "thawte, Inc.", OU = Certification Services
> Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN =
> thawte Primary Root CA
>         Subject: C = US, O = "Thawte, Inc.", CN = Thawte SSL CA
> 
> 
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux