diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2015-08-31 18:27:57 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2015-08-31 20:58:33 +0100 |
| commit | d8c054f2dafbcc22dd8c38cd48ae45bb96dbd475 (patch) | |
| tree | 9c9601a4ef0c1d0ba59b4f7ee40bec877b831f7c /doc/apps | |
| parent | 36ac7bc8a9c856bcdff6eecdaca128ccc5430a1e (diff) | |
| download | openssl-d8c054f2dafbcc22dd8c38cd48ae45bb96dbd475.zip openssl-d8c054f2dafbcc22dd8c38cd48ae45bb96dbd475.tar.gz openssl-d8c054f2dafbcc22dd8c38cd48ae45bb96dbd475.tar.bz2 | |
Remove asn1-kludge option.
Remove asn1-kludge option from the req utility. It was a decade old
workaround for CAs and software which required an invalid encoding
of PKCS#10 certificate requests: omitting the attributes field even
though it is not OPTIONAL.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'doc/apps')
| -rw-r--r-- | doc/apps/req.pod | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/doc/apps/req.pod b/doc/apps/req.pod index 46bbfe6..ec19192 100644 --- a/doc/apps/req.pod +++ b/doc/apps/req.pod @@ -34,8 +34,6 @@ B<openssl> B<req> [B<-x509>] [B<-days n>] [B<-set_serial n>] -[B<-asn1-kludge>] -[B<-no-asn1-kludge>] [B<-newhdr>] [B<-extensions section>] [B<-reqexts section>] @@ -274,26 +272,6 @@ a single option or multiple options separated by commas. See discussion of the B<-certopt> parameter in the L<x509(1)> command. - -=item B<-asn1-kludge> - -by default the B<req> command outputs certificate requests containing -no attributes in the correct PKCS#10 format. However certain CAs will only -accept requests containing no attributes in an invalid form: this -option produces this invalid format. - -More precisely the B<Attributes> in a PKCS#10 certificate request -are defined as a B<SET OF Attribute>. They are B<not OPTIONAL> so -if no attributes are present then they should be encoded as an -empty B<SET OF>. The invalid form does not include the empty -B<SET OF> whereas the correct form does. - -It should be noted that very few CAs still require the use of this option. - -=item B<-no-asn1-kludge> - -Reverses effect of B<-asn1-kludge> - =item B<-newhdr> Adds the word B<NEW> to the PEM file header and footer lines on the outputted |