If I run

    openssl x509 -nameopt show_type -noout -text -in user-a1.crt 

against the certificate below, the openssl command line program appears
to crash in the middle of printing the certificate information. My
output appears as:

    Certificate:
        Data:
            Version: 3 (0x2)
            Serial Number: 736501 (0xb3cf5)
            Signature Algorithm: sha256WithRSAEncryption
            Issuer: $

(The '$' at the end is my shell prompt.)

Clearly a bug, though not a critical one for us. But I also wonder if
there's something wrong with the certificate I generated. (I built the
certificate myself using the Ruby OpenSSL API.)

The contents of the user-a1.crt file are:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

[Sorry about not including it as a MIME attachement, but the list's mail
server believes that the above is a "Potentially dangerous file." Which
I suppose it is if you run "x509 -nameopt show_type" on it. :-)]

cjs
-- 
Curt Sampson         <c...@cynic.net>         +81 90 7737 2974
             http://www.starling-software.com/
I have always wished for my computer to be as easy to use as my telephone;
my wish has come true because I can no longer figure out how to use my
telephone.  --Bjarne Stroustrup
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to