summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2018-02-23 09:46:30 +0000
committerMatt Caswell <matt@openssl.org>2018-03-15 13:32:23 +0000
commit130db4ae7d3cbec36f13bab7777ee3668b1f4ba4 (patch)
treea9477e8f34752425ebce516e7e2d70551a1c8f3b
parent9995007afff6384866f8db4ab986b9a3edb97ecd (diff)
Revert "Don't allow an empty Subject when creating a Certificate"
This reverts commit f2982ad79c9eeac4d8ee4225056f971eadf9302b. Empty Subjects should be permissible. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5627)
-rw-r--r--apps/ca.c10
1 files changed, 0 insertions, 10 deletions
diff --git a/apps/ca.c b/apps/ca.c
index 603adfd406..2403397128 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1405,10 +1405,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
"The Subject's Distinguished Name is as follows\n");
name = X509_REQ_get_subject_name(req);
- if (X509_NAME_entry_count(name) == 0) {
- BIO_printf(bio_err, "Error: The supplied Subject is empty\n");
- goto end;
- }
for (i = 0; i < X509_NAME_entry_count(name); i++) {
ne = X509_NAME_get_entry(name, i);
str = X509_NAME_ENTRY_get_data(ne);
@@ -1573,12 +1569,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
goto end;
}
- if (X509_NAME_entry_count(subject) == 0) {
- BIO_printf(bio_err,
- "Error: After applying policy the Subject is empty\n");
- goto end;
- }
-
if (verbose)
BIO_printf(bio_err,
"The subject name appears to be ok, checking data base for clashes\n");