generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update X509v3 docs.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2004-11-16 17:45:13 +00:00
parent 826a42a088
commit 37dccd8ff2
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
doc/apps/x509v3_config.pod
View File

@ -164,6 +164,8 @@ The email option include a special 'copy' value. This will automatically
include and email addresses contained in the certificate subject name in include and email addresses contained in the certificate subject name in
the extension. the extension.
The IP address used in the B<IP> options can be in either IPv4 or IPv6 format.
The value of B<dirName> should point to a section containing the distinguished The value of B<dirName> should point to a section containing the distinguished
name to use as a set of name value pairs. Multi values AVAs can be formed by name to use as a set of name value pairs. Multi values AVAs can be formed by
preceeding the name with a B<+> character. preceeding the name with a B<+> character.
@ -175,6 +177,8 @@ ASN1_generate_nconf() format.
Examples: Examples:
subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/ subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/
subjectAltName=IP:192.168.7.1
subjectAltName=IP:13::17
subjectAltName=email:my@other.address,RID:1.2.3.4 subjectAltName=email:my@other.address,RID:1.2.3.4
subjectAltName=otherName:1.2.3.4;UTF8:some other identifier subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
@ -284,6 +288,25 @@ The B<ia5org> option changes the type of the I<organization> field. In RFC2459
it can only be of type DisplayText. In RFC3280 IA5Strring is also permissible. it can only be of type DisplayText. In RFC3280 IA5Strring is also permissible.
Some software (for example some versions of MSIE) may require ia5org. Some software (for example some versions of MSIE) may require ia5org.
=head2 Policy Constraints
This is a multi-valued extension which consisting of the names
B<requireExplicitPolicy> or B<inhibitPolicyMapping> and a non negative intger
value. At least one component must be present.
Example:
policyConstraints = requireExplicitPolicy:3
=head2 Inhibit Any Policy
This is a string extension whose value must be a non negative integer.
Example:
inhibitAnyPolicy = 2
=head1 DEPRECATED EXTENSIONS =head1 DEPRECATED EXTENSIONS