Allow multiple entries without a Subject even if unique_subject == yes
authorMatt Caswell <matt@openssl.org>
Fri, 23 Feb 2018 19:48:11 +0000 (19:48 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 15 Mar 2018 13:34:57 +0000 (13:34 +0000)
commitdacdc5fe526d5b838f51711ba602d375159e488a
tree7f7b4248a30fa26870236e0d7bce11d38f9ee93a
parent50615b3c969d1cc2d4beb09f141c678bfe06382b
Allow multiple entries without a Subject even if unique_subject == yes

It is quite likely for there to be multiple certificates with empty
subjects, which are still distinct because of subjectAltName. Therefore
we allow multiple certificates with an empty Subject even if
unique_subject is set to yes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5445)
apps/ca.c
doc/apps/ca.pod