[Pkg-openssl-devel] Bug#422882: openssl: mistake in note on x509v3_config manual page
Sebastian Andrzej Siewior
sebastianbreakpoint.cc at breakpoint.cc
Sat Jan 7 13:27:05 UTC 2017
control: tags -1 - patch
On 2007-05-09 00:27:24 [+0200], Javier Barroso wrote:
> > And I have no idea what you think is wrong ...
>
> I can't generate the certificate (with a crlDistributionPoints ldap
> uri within it) with manual page instruction.
>
> When subjectAltName is crlDistributionPoints, the manual recommend fails:
> subjectAltName=@subject_alt_section
> [subject_alt_section]
> subjectAltName=URI:ldap://somehost.com/CN=foo,OU=bar
>
> I think the correct setup is (at least for crlDistributionPoints):
> subjectAltName=@subject_alt_section
> [subject_alt_section]
> URI=ldap://somehost.com/CN=foo,OU=bar
>
> I can generate my certificate with the second config, but not with the first
Does this still apply? As of 1.1.0c it seems to work with the former
example and fails with the latter.
Sebastian
More information about the Pkg-openssl-devel
mailing list