[Pkg-openssl-devel] Bug#422882: openssl: mistake in note on x509v3_config manual page

Sebastian Andrzej Siewior sebastianbreakpoint.cc at breakpoint.cc
Sat Jan 7 13:27:05 UTC 2017


control: tags -1 - patch

On 2007-05-09 00:27:24 [+0200], Javier Barroso wrote:
> > And I have no idea what you think is wrong ...
> 
> I can't generate the certificate (with a crlDistributionPoints ldap
> uri within it) with manual page instruction.
> 
> When subjectAltName is crlDistributionPoints, the manual recommend fails:
> subjectAltName=@subject_alt_section
> [subject_alt_section]
> subjectAltName=URI:ldap://somehost.com/CN=foo,OU=bar
> 
> I think the correct setup is (at least for crlDistributionPoints):
> subjectAltName=@subject_alt_section
> [subject_alt_section]
> URI=ldap://somehost.com/CN=foo,OU=bar
> 
> I can generate my certificate with the second config, but not with the first

Does this still apply? As of 1.1.0c it seems to work with the former
example and fails with the latter.

Sebastian



More information about the Pkg-openssl-devel mailing list