generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make change uniqueIdentifier -> x500UniqueIdentifier clearly visible.

Browse Source 
Submitted by:
Reviewed by:
PR: 82
This commit is contained in:
Lutz Jänicke
2002-06-12 20:42:04 +00:00
parent 78af3b274f
commit f10581829d
3 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGES
View File

@@ -32,6 +32,8 @@
form for "surname", serialNumber has no short form. form for "surname", serialNumber has no short form.
Use "mail" as the short name for "rfc822Mailbox" according to RFC2798; Use "mail" as the short name for "rfc822Mailbox" according to RFC2798;
therefore remove "mail" short name for "internet 7". therefore remove "mail" short name for "internet 7".
The OID for unique identifiers in X509 certificates is
x500UniqueIdentifier, not uniqueIdentifier.
Some more OID additions. (Michael Bell <michael.bell@rz.hu-berlin.de>) Some more OID additions. (Michael Bell <michael.bell@rz.hu-berlin.de>)
[Lutz Jaenicke] [Lutz Jaenicke]

9
FAQ
View File

@@ -52,6 +52,7 @@ OpenSSL - Frequently Asked Questions
* Why can't the OpenSSH configure script detect OpenSSL? * Why can't the OpenSSH configure script detect OpenSSL?
* Can I use OpenSSL's SSL library with non-blocking I/O? * Can I use OpenSSL's SSL library with non-blocking I/O?
* Why doesn't my server application receive a client certificate? * Why doesn't my server application receive a client certificate?
* Why does compilation fail due to an undefined symbol NID_uniqueIdentifier?
=============================================================================== ===============================================================================
@@ -624,5 +625,13 @@ if explicitly asked by the server. Use the SSL_VERIFY_PEER flag of the
SSL_CTX_set_verify() function to enable the use of client certificates. SSL_CTX_set_verify() function to enable the use of client certificates.
* Why does compilation fail due to an undefined symbol NID_uniqueIdentifier?
For OpenSSL 0.9.7 the OID table was extended and corrected. uniqueIdentifier
was incorrectly used for X.509 certificates. The correct name according to
RFC2256 (LDAP) is x500UniqueIdentifier. Change your code to use the new
name when compiling against OpenSSL 0.9.7.
=============================================================================== ===============================================================================

1
NEWS
View File

@@ -31,6 +31,7 @@
o Reworked parts of the BIGNUM code. o Reworked parts of the BIGNUM code.
o Support for new engines: Broadcom ubsec, Accelerated Encryption o Support for new engines: Broadcom ubsec, Accelerated Encryption
Processing, IBM 4758. Processing, IBM 4758.
o Extended and corrected OID (object identifier) table.
o PRNG: query at more locations for a random device, automatic query for o PRNG: query at more locations for a random device, automatic query for
EGD style random sources at several locations. EGD style random sources at several locations.
o SSL/TLS: allow optional cipher choice according to server's preference. o SSL/TLS: allow optional cipher choice according to server's preference.