Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why is OpenSSL x509 DN output not conformant to RFC2253?

April 26, 2017conformant DN OpenSSL output

0

Posted

Why is OpenSSL x509 DN output not conformant to RFC2253?

1 Answer

0

Posted

The ways to print out the oneline format of the DN (Distinguished Name) have been extended in version 0.9.7 of OpenSSL. Using the new X509_NAME_print_ex() interface, the “-nameopt” option could be introduded. See the manual page of the “openssl x509” commandline tool for details. The old behaviour has however been left as default for the sake of compatibility.