[openssl-users] x509: recent change in Subject and Issuer printing?

[Matt Caswell]

On 04/03/18 02:22, Adam Shannon wrote:
> Was there a change included in the 1.1.0 series which prints names
> differently? I've looked, but been unable to narrow down what in
> specific changed.

This was changed by commit f1cece554d.

The default "nameopt" setting for the x509 app (and a few others)
changed from "compat" to "oneline". See the man page here for
descriptions of these options:

https://www.openssl.org/docs/man1.1.0/apps/x509.html

If you add "-nameopt compat" to your 1.1.0 command line you should see
the old behaviour.

Matt



> 
> $ /usr/local/opt/openssl/bin/openssl version
> OpenSSL 1.0.2n  7 Dec 2017
> 
> $ /usr/local/opt/openssl/bin/openssl x509 -in thawte.pem -noout -text |
> grep -E 'Issuer:|Subject:'
>         Issuer: C=US, O=thawte, Inc., OU=Certification Services
> Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte
> Primary Root CA
>         Subject: C=US, O=Thawte, Inc., CN=Thawte SSL CA
> 
> $ openssl version
> OpenSSL 1.1.0f  25 May 2017
> 
> $ openssl x509 -in thawte.pem -noout -text | grep -E 'Issuer:|Subject:'
>         Issuer: C = US, O = "thawte, Inc.", OU = Certification Services
> Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN =
> thawte Primary Root CA
>         Subject: C = US, O = "Thawte, Inc.", CN = Thawte SSL CA
> 
>