[openssl-dev] OpenSSL patches and enhancements from Akamai

Short, Todd tshort at akamai.com
Tue Feb 17 15:09:26 UTC 2015


Hi Brian:

Given that the subject certificate is self-signed, it means that the issuer and the subject are the same certificate. This change verifies that.
--
-Todd Short
// tshort at akamai.com<mailto:tshort at akamai.com>
// “One if by land, two if by sea, three if by the Internet."

On Feb 13, 2015, at 12:54 PM, Brian Smith <brian at briansmith.org<mailto:brian at briansmith.org>> wrote:

Very cool.

Short, Todd <tshort at akamai.com<mailto:tshort at akamai.com>> wrote:
* Check that in matching issuer/subject certs, that a self-signed subject
also has a self-signed issuer

Could you explain this one? It isn't necessarily the case that a
self-signed subject has a self-signed issuer in PKIX, if I am
understanding you correctly.

Cheers,
Brian
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150217/daa2724b/attachment.html>


More information about the openssl-dev mailing list