generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Allow the 1.OU="my OU" syntax in 'ca' for SPKACs.

Browse Source
This commit is contained in:
Dr. Stephen Henson 1999-08-25 23:18:23 +00:00
parent c79b16e11d
commit f9150e5421
2 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
CHANGES
View File

@ -4,6 +4,13 @@
Changes between 0.9.4 and 0.9.5 [xx XXX 1999] Changes between 0.9.4 and 0.9.5 [xx XXX 1999]
*) Add new feature to the SPKAC handling in ca. Now you can include
the same field multiple times by preceding it by "XXXX." for example:
1.OU="Unit name 1"
2.OU="Unit name 2"
this is the same syntax as used in the req config file.
[Steve Henson]
*) Allow certificate extensions to be added to certificate requests. These *) Allow certificate extensions to be added to certificate requests. These
are specified in a 'req_extensions' option of the req section of the are specified in a 'req_extensions' option of the req section of the
config file. They can be printed out with the -text option to req but config file. They can be printed out with the -text option to req but

11
apps/ca.c
View File

@ -1986,8 +1986,17 @@ static int certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
cv=sk_CONF_VALUE_value(sk,i); cv=sk_CONF_VALUE_value(sk,i);
type=cv->name; type=cv->name;
buf=cv->value; /* Skip past any leading X. X: X, etc to allow for
* multiple instances
*/
for(buf = cv->name; *buf ; buf++)
if ((*buf == ':') || (*buf == ',') || (*buf == '.')) {
buf++;
if(*buf) type = buf;
break;
}
buf=cv->value;
if ((nid=OBJ_txt2nid(type)) == NID_undef) if ((nid=OBJ_txt2nid(type)) == NID_undef)
{ {
if (strcmp(type, "SPKAC") == 0) if (strcmp(type, "SPKAC") == 0)