[openssl-users] x509: recent change in Subject and Issuer printing?
matt at openssl.org
Mon Mar 5 09:07:32 UTC 2018
On 04/03/18 02:22, Adam Shannon wrote:
> Was there a change included in the 1.1.0 series which prints names
> differently? I've looked, but been unable to narrow down what in
> specific changed.
This was changed by commit f1cece554d.
The default "nameopt" setting for the x509 app (and a few others)
changed from "compat" to "oneline". See the man page here for
descriptions of these options:
If you add "-nameopt compat" to your 1.1.0 command line you should see
the old behaviour.
> $ /usr/local/opt/openssl/bin/openssl version
> OpenSSL 1.0.2n 7 Dec 2017
> $ /usr/local/opt/openssl/bin/openssl x509 -in thawte.pem -noout -text |
> grep -E 'Issuer:|Subject:'
> Issuer: C=US, O=thawte, Inc., OU=Certification Services
> Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte
> Primary Root CA
> Subject: C=US, O=Thawte, Inc., CN=Thawte SSL CA
> $ openssl version
> OpenSSL 1.1.0f 25 May 2017
> $ openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
> Issuer: C = US, O = "thawte, Inc.", OU = Certification Services
> Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN =
> thawte Primary Root CA
> Subject: C = US, O = "Thawte, Inc.", CN = Thawte SSL CA
More information about the openssl-users