]> git.ipfire.org Git - thirdparty/openssl.git/commit
Fix openssl req with -addext subjectAltName=dirName
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 23 Feb 2024 09:32:14 +0000 (10:32 +0100)
committerTomas Mraz <tomas@openssl.org>
Tue, 2 Apr 2024 15:35:25 +0000 (17:35 +0200)
commit387418893e45e588d1cbd4222549b5113437c9ab
tree3b9639ab7a2c91f0119346995649384f77aef891
parent36e2fbe38b21ce6d4a6bfde3b6deb692ca32fa39
Fix openssl req with -addext subjectAltName=dirName

The syntax check of the -addext fails because the
X509V3_CTX is used to lookup the referenced section,
but the wrong configuration file is used, where only
a default section with all passed in -addext lines is available.
Thus it was not possible to use the subjectAltName=dirName:section
as an -addext parameter.  Probably other extensions as well.

This change affects only the syntax check, the real extension
was already created with correct parameters.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23669)
apps/req.c
test/recipes/25-test_req.t
test/test.cnf