diff options
| author | Job Snijders <job@sobornost.net> | 2024-01-10 18:15:52 +0100 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2024-01-15 10:40:01 +0100 |
| commit | 4e5bf933131863e0459d7b39931d464fef77b078 (patch) | |
| tree | 1ca2f5c4702aa4d977c9aa5b0462e79e593473e7 /CHANGES.md | |
| parent | aes_platform.h, gcm128.c: fix Darwin PowerPC macro to include ppc64 (diff) | |
| download | openssl-4e5bf933131863e0459d7b39931d464fef77b078.tar.xz openssl-4e5bf933131863e0459d7b39931d464fef77b078.zip | |
Add apps/x509 -set_issuer & -set_subject option to override issuer & subject
This changeset adds the counterpart to the '-subj' option to allow overriding
the Issuer. For consistency, the `-subj` option is aliased to `-set_subject`.
The issuer can be specified as following apps/openssl x509 -new -set_issuer
'/CN=example-nro-ta' -subj '/CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13' ...
This is useful in constructing specific test-cases or rechaining PKI trees
Joint work with George Michaelson (@geeohgeegeeoh)
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23257)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index eb16a6e24e..58d06ae498 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -36,6 +36,12 @@ OpenSSL 3.3 *Neil Horman* + * Added `-set_issuer` and `-set_subject` options to `openssl x509` to + override the Issuer and Subject when creating a certificate. The `-subj` + option now is an alias for `-set_subject`. + + *Job Snijders, George Michaelson* + * OPENSSL_sk_push() and sk_<TYPE>_push() functions now return 0 instead of -1 if called with a NULL stack argument. |