summaryrefslogtreecommitdiffstats
path: root/apps/openssl-vms.cnf
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2006-02-26 11:48:40 +0100
committerRichard Levitte <levitte@openssl.org>2006-02-26 11:48:40 +0100
commit9ab899a660b30d80d844c5d1be9998180c91149a (patch)
tree9373bd28d3e6e47289fa12d34504ae6b34c66d97 /apps/openssl-vms.cnf
parentAdd a TSA test. testtsa.com is a manual sh to dcl translation of (diff)
downloadopenssl-9ab899a660b30d80d844c5d1be9998180c91149a.tar.xz
openssl-9ab899a660b30d80d844c5d1be9998180c91149a.zip
Synchronise with openss.cnf
Diffstat (limited to 'apps/openssl-vms.cnf')
-rw-r--r--apps/openssl-vms.cnf9
1 files changed, 4 insertions, 5 deletions
diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 6685cf1df1..c8e1a61a11 100644
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -115,13 +115,12 @@ x509_extensions = v3_ca # The extentions to add to the self signed cert
# This sets a mask for permitted string types. There are several options.
# default: PrintableString, T61String, BMPString.
-# pkix : PrintableString, BMPString.
-# utf8only: only UTF8Strings.
+# pkix : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
# MASK:XXXX a literal mask value.
-# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
-# so use this option with caution!
-string_mask = nombstr
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
# req_extensions = v3_req # The extensions to add to a certificate request