[openssl-users] x509 manual

[Matt Caswell]

On 08/11/2018 12:44, Dmitry Belyavsky wrote:
> Hello,
> 
> can anybody clarify what for the abbreviations AVA and RDN stand for?

RDN == Relative Distinguised Name
AVA == Attribute Value Assertion

An RDN consists of an unordered set of AVAs (but most frequently an RDN
is made up of exactly one AVA, e.g. CN = "John"). A Distinguished Name
(DN) is made up of a sequence of RDNs.

That man page could probably do with some work to reduce the jargon.

Matt


> 
> ============
> sep_comma_plus, sep_comma_plus_space, sep_semi_plus_space, sep_multiline
> These options determine the field separators. The first character is
> between RDNs and the second between multiple AVAs (multiple AVAs are
> very rare and their use is discouraged). The options ending in "space"
> additionally place a space after the separator to make it more readable.
> The sep_multiline uses a linefeed character for the RDN separator and a
> spaced + for the AVA separator. It also indents the fields by four
> characters. If no field separator is specified then sep_comma_plus_space
> is used by default.
> =============
> 
> Thank you!
> -- 
> SY, Dmitry Belyavsky
>