
<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Brian:<div class=""><br class=""></div><div class="">Given that the subject certificate is self-signed, it means that the issuer and the subject are the same certificate. This change verifies that.<br class=""><div apple-content-edited="true" class="">


<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">--</div><div class="">-Todd Short</div><div class="">// <a href="mailto:tshort@akamai.com" class="">tshort@akamai.com</a></div><div class="">// “One if by land, two if by sea, three if by the Internet."</div></div>


</div>


<br class=""><div><blockquote type="cite" class=""><div class="">On Feb 13, 2015, at 12:54 PM, Brian Smith <<a href="mailto:brian@briansmith.org" class="">brian@briansmith.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">Very cool.<br class=""><br class="">Short, Todd <<a href="mailto:tshort@akamai.com" class="">tshort@akamai.com</a>> wrote:<br class=""><blockquote type="cite" class="">* Check that in matching issuer/subject certs, that a self-signed subject<br class="">also has a self-signed issuer<br class=""></blockquote><br class="">Could you explain this one? It isn't necessarily the case that a<br class="">self-signed subject has a self-signed issuer in PKIX, if I am<br class="">understanding you correctly.<br class=""><br class="">Cheers,<br class="">Brian<br class="">_______________________________________________<br class="">openssl-dev mailing list<br class="">To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-dev" class="">https://mta.openssl.org/mailman/listinfo/openssl-dev</a><br class=""></div></blockquote></div><br class=""></div></body></html>