diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2022-09-24 23:59:12 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2023-01-24 15:16:47 +0100 |
| commit | 342e3652c791bdb06e08abcc169b4456c83ccd00 (patch) | |
| tree | 87190b58432cd73cc8dd1d4bfd9dfd027f2f236f /CHANGES.md | |
| parent | 66fc90f18c44cdac0126c35ffedb99ba7a8b9825 (diff) | |
| download | openssl-342e3652c791bdb06e08abcc169b4456c83ccd00.tar.gz | |
APPS: generated certs bear X.509 V3, unless -x509v1 option of req app is given
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/19271)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index b616638e48..d04a8c2bdd 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -127,6 +127,13 @@ OpenSSL 3.2 * Lutz Jänicke* + * The `x509`, `ca`, and `req` apps now produce X.509 v3 certificates. + The `-x509v1` option of `req` prefers generation of X.509 v1 certificates. + `X509_sign()` and `X509_sign_ctx()` make sure that the certificate has + X.509 version 3 if the certificate information includes X.509 extensions. + + *David von Oheimb* + * Fix and extend certificate handling and the apps `x509`, `verify` etc. such as adding a trace facility for debugging certificate chain building. |