x509: recent change in Subject and Issuer printing?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

x509: recent change in Subject and Issuer printing?

Adam Shannon
Was there a change included in the 1.1.0 series which prints names differently? I've looked, but been unable to narrow down what in specific changed.

$ /usr/local/opt/openssl/bin/openssl version
OpenSSL 1.0.2n  7 Dec 2017

$ /usr/local/opt/openssl/bin/openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject: C=US, O=Thawte, Inc., CN=Thawte SSL CA


$ openssl version
OpenSSL 1.1.0f  25 May 2017

$ openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
        Issuer: C = US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root CA
        Subject: C = US, O = "Thawte, Inc.", CN = Thawte SSL CA


--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: x509: recent change in Subject and Issuer printing?

Matt Caswell-2


On 04/03/18 02:22, Adam Shannon wrote:
> Was there a change included in the 1.1.0 series which prints names
> differently? I've looked, but been unable to narrow down what in
> specific changed.

This was changed by commit f1cece554d.

The default "nameopt" setting for the x509 app (and a few others)
changed from "compat" to "oneline". See the man page here for
descriptions of these options:

https://www.openssl.org/docs/man1.1.0/apps/x509.html

If you add "-nameopt compat" to your 1.1.0 command line you should see
the old behaviour.

Matt



>
> $ /usr/local/opt/openssl/bin/openssl version
> OpenSSL 1.0.2n  7 Dec 2017
>
> $ /usr/local/opt/openssl/bin/openssl x509 -in thawte.pem -noout -text |
> grep -E 'Issuer:|Subject:'
>         Issuer: C=US, O=thawte, Inc., OU=Certification Services
> Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte
> Primary Root CA
>         Subject: C=US, O=Thawte, Inc., CN=Thawte SSL CA
>
> $ openssl version
> OpenSSL 1.1.0f  25 May 2017
>
> $ openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
>         Issuer: C = US, O = "thawte, Inc.", OU = Certification Services
> Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN =
> thawte Primary Root CA
>         Subject: C = US, O = "Thawte, Inc.", CN = Thawte SSL CA
>
>
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users