Allow multiple entries without a Subject even if unique_subject == yes
authorMatt Caswell <matt@openssl.org>
Fri, 23 Feb 2018 19:48:11 +0000 (19:48 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 15 Mar 2018 13:32:23 +0000 (13:32 +0000)
commit23324ce79c5fdc1ccd042c43ee1ef88aa1f294bc
treee547c5ee7c901e0c73613b9d27b1da37e1bffc3d
parente0e77c556314d6db7416e060710605a4ebf8a5fd
Allow multiple entries without a Subject even if unique_subject == yes

It is quite likely for there to be multiple certificates with empty
subjects, which are still distinct because of subjectAltName. Therefore
we allow multiple certificates with an empty Subject even if
unique_subject is set to yes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5627)
apps/ca.c
doc/apps/ca.pod