summaryrefslogtreecommitdiff
path: root/apps/openssl.cnf
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>1999-10-27 00:15:11 +0000
committerDr. Stephen Henson <steve@openssl.org>1999-10-27 00:15:11 +0000
commit74400f7348c589bf9e7cd17f657c05b25f8758b1 (patch)
tree0f3af155bb1cf7cd0a717eab9a8183dae2bdf4ee /apps/openssl.cnf
parent62ac2938015939e2ef30f12295f0ee59ff79c11b (diff)
downloadopenssl-new-74400f7348c589bf9e7cd17f657c05b25f8758b1.tar.gz
Continued multibyte character support.
Add a bunch of functions to simplify the creation of X509_NAME structures. Change the X509_NAME_entry_add stuff in req/ca so it no longer uses X509_NAME_entry_count(): passing -1 has the same effect.
Diffstat (limited to 'apps/openssl.cnf')
-rw-r--r--apps/openssl.cnf11
1 files changed, 11 insertions, 0 deletions
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 8d044fb6b2..33b0866f43 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -86,6 +86,17 @@ distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert
+# This sets the permitted types in a DirectoryString. There are several
+# options.
+# default: PrintableString, T61String, BMPString.
+# pkix : PrintableString, BMPString.
+# utf8only: only UTF8Strings.
+# nobmp : PrintableString, T61String (no BMPStrings).
+# MASK:XXXX a literal mask value.
+# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
+# so use this option with caution!
+dirstring_type = nobmp
+
# req_extensions = v3_req # The extensions to add to a certificate request
[ req_distinguished_name ]