diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-24 12:43:39 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-13 11:53:15 +0100 |
| commit | b65c5ec8f5f8c9fa082c44bf805beed03d0fee0c (patch) | |
| tree | 2bc3ce487192eb578a252b9a68d4637b54c77ef8 /CHANGES.md | |
| parent | 41e597a01d95540f52e8bc4d69f88c3d93a093ce (diff) | |
apps/req.c: Add -copy_extensions option for use with -x509; default: none
Fixes #13708
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13658)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 56017e503b..ac0b22c6fb 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -914,6 +914,12 @@ OpenSSL 3.0 *Richard Levitte* + * Added the `<-copy_extensions` option to the `req` command for use with `-x509`. + When given with the `copy` or `copyall` argument, + any extensions present in the certification request are copied to the certificate. + + *David von Oheimb* + * The `x509`, `req`, and `ca` commands now make sure that certificates they generate are RFC 5280 compliant by default: For X.509 version 3 certs they ensure that a subjectKeyIdentifier extension is included containing a hash value of the public key |