aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2006-08-11 21:54:35 +0000
committerRob Austein <sra@hactrn.net>2006-08-11 21:54:35 +0000
commit43999f1b230e8ec5908e176db2f655db029699c7 (patch)
tree77d2bceda5a82af541dcb7e10f5b0b5025597b26
parent767a1629159b96490de84092a6ad1bf7857f6193 (diff)
verify -policy already exists?
svn path=/openssl/README; revision=147
-rw-r--r--openssl/README4
1 files changed, 3 insertions, 1 deletions
diff --git a/openssl/README b/openssl/README
index ad03d4fc..542e5b48 100644
--- a/openssl/README
+++ b/openssl/README
@@ -239,9 +239,11 @@ Random reminders and notes to myself:
- "openssl verify" reports an unknown critical exception error for
certificatePolicies (RFC 3280 4.2.1.5). Probably need to add a
switch to "openssl verify" to accept a certificate policy OID.
+ Hmm, looks like it already has an undocumented -policy switch which
+ might do the right thing (if I could figure out what it does...).
- "openssl verify" only accepts PEM, not DER, which is annoying.
- Probably need to add an -inform switch.
+ Needs an -inform switch.
- Right way to handle error reporting from xxx_canonize() functions is
almost certainly a callback; this would fit fairly well with the