2009/10/29 David Schwartz <dav...@webmaster.com>: > > Daniel Marschall: > >> Hello. >> >> I am not searching bugs in my code. I have a certificate and a CRL. >> And the functionality -issuer_checks is buggy. My cert and CRL have >> exactky the same DN as issuer. > > What is the bug then? All you've reported so far is:
Hello David, > > 1) When you compare using exact string compares, you get nonsensical > results. The string compare was just a manual check as desciped by Dr. Stephen Henson in http://www.mail-archive.com/openssl-users@openssl.org/msg30722.html . It actually isn't important if there is a whitespace or not, but I personally think that might be the internal bug in -issuer_checks . > > 2) When you enable informational messages, you get accurate informational > messages. Please tell me, why it isn't a bug! I don't understand it. In my case and also in the uncleared case of Helga Krause, the CRL was issued by Person X and the CRT was also issued by Person X. "-issuer_checks" should output nothing. But instead, it does tell me that the issuers are different. But they are equal. So, it is a bug, isn't it? > > DS > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-us...@openssl.org > Automated List Manager majord...@openssl.org > -- Daniel Marschall www.daniel-marschall.de +49 6223 488840 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org