> From: owner-openssl-us...@openssl.org On Behalf Of Curt Sampson > Sent: Tuesday, 06 March, 2012 00:38
> If I run > > openssl x509 -nameopt show_type -noout -text -in user-a1.crt > > against the certificate below, the openssl command line > program appears > to crash in the middle of printing the certificate information. More exactly at the beginning of the first name field, Issuer. > Clearly a bug, though not a critical one for us. But I also wonder if > there's something wrong with the certificate I generated. (I built the > certificate myself using the Ruby OpenSSL API.) > > The contents of the user-a1.crt file are: <snip> Digging through the code I find that if you specify nonzero nmflags (i.e. not the old 'compat' format) you must have one of the sep_* options. The 'combo' options (RFC2253, oneline, multiline) which the manpage recommends all include a sep_* value; if you construct it 'by hand' you must specify one. For example -nameopt sep_comma_plus,show_type works. Yes, just exiting with no error message is unhelpful. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
