| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
to subjectAltName when signing a certificate.
|
| |
|
|
|
|
|
|
|
| |
Add default values for display by the 'ca' utility
to openssl.cnf
Update docs.
|
| |
|
| |
|
|
|
|
|
|
|
| |
that can automatically determine the type of a DER encoded
"traditional" format private key and change some of the
d2i functions to use it instead of requiring the application
to work out the key type.
|
|
|
|
| |
more utilities.
|
|
|
|
|
|
|
| |
Add a bunch of functions to simplify the creation of X509_NAME structures.
Change the X509_NAME_entry_add stuff in req/ca so it no longer uses
X509_NAME_entry_count(): passing -1 has the same effect.
|
|
|
|
| |
config file (change RAW to DER).
|
| |
|
|
|
|
| |
do sensible things with extensions.
|
|
|
|
|
| |
doesn't have a default value like the "-config" options of other
openssl subprograms.
|
|
|
|
| |
which cost me some time to find out about.
|
|
|
|
|
| |
make 'req' check the config file syntax before it adds extensions. Added
info in the documentation as well.
|
| |
|
|
|
|
|
| |
to include email addresses from DN and copy details from issuer certificate.
Include examples in openssl.cnf, update Win32 ordinals.
|
| |
|
|
|
|
|
|
|
|
| |
of an arbitrary extension: e.g. 1.3.4.5=critical,RAW:12:34:56 Using this
technique currently unsupported extensions can be generated if you know their
DER encoding. Even if the extension is supported in future the raw extension
will still work: that is the raw version can always be used even if it is a
supported extension.
|
|
|
|
|
|
|
| |
name, issuer and authority key id. Change the i2v function parameters
and add an extra 'crl' parameter in the X509V3_CTX structure: guess
what that's for :-) Fix to ASN1 macro which messed up
IMPLICIT tag and add f_enum.c which adds a2i, i2a for ENUMERATED.
|
|
|
|
| |
openssl.cnf for the new syntax.
|
|
|
|
|
|
|
| |
so that: openssl req -x509 -new -out cert.pem
will take extensions from openssl.cnf a sample for a CA is included.
Also change the directory order so pem is nearer the end. Otherwise 'make links'
wont work because pem.h can't be built.
|
|
|
|
|
|
|
|
|
| |
`openssl' and second, the shortcut symlinks for the `openssl <command>' are no
longer created. This way we have a single and consistent command line
interface `openssl <command>', similar to `cvs <command>'.
Notice, the openssl.cnf, openssl.c and progs.pl files were changed after a
repository copy, i.e. they still contain the complete file history.
|
| |
|
|
|