diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2021-11-10 09:39:55 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2021-12-07 15:14:49 +0100 |
| commit | 317acac5cc0a2cb31bc4b91353c2b752a3989d8a (patch) | |
| tree | b14ee6f412c1ac6a5957c10f8c29d0c0d2066041 /doc/man3 | |
| parent | 15ac84e603678140ba32832c288e5f1745a258f8 (diff) | |
X509V3_set_ctx(): Clarify subject/req parameter for constructing SAN email addresses from subject DN
Also slightly improve the style of the respective code in crypto/x509/v3_san.c.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17145)
Diffstat (limited to 'doc/man3')
| -rw-r--r-- | doc/man3/X509V3_set_ctx.pod | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/man3/X509V3_set_ctx.pod b/doc/man3/X509V3_set_ctx.pod index 820052ba98..8287802e41 100644 --- a/doc/man3/X509V3_set_ctx.pod +++ b/doc/man3/X509V3_set_ctx.pod @@ -22,6 +22,8 @@ Any of I<subject>, I<req>, or I<crl> may be provided, pointing to a certificate, certification request, or certificate revocation list, respectively. When constructing the subject key identifier of a certificate by computing a hash value of its public key, the public key is taken from I<subject> or I<req>. +Similarly, when constructing subject alternative names from any email addresses +contained in a subject DN, the subject DN is taken from I<subject> or I<req>. If I<subject> or I<crl> is provided, I<issuer> should point to its issuer, for instance to help generating an authority key identifier extension. Note that if I<subject> is provided, I<issuer> may be the same as I<subject>, |