From 43999f1b230e8ec5908e176db2f655db029699c7 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Fri, 11 Aug 2006 21:54:35 +0000 Subject: verify -policy already exists? svn path=/openssl/README; revision=147 --- openssl/README | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'openssl') diff --git a/openssl/README b/openssl/README index ad03d4fc..542e5b48 100644 --- a/openssl/README +++ b/openssl/README @@ -239,9 +239,11 @@ Random reminders and notes to myself: - "openssl verify" reports an unknown critical exception error for certificatePolicies (RFC 3280 4.2.1.5). Probably need to add a switch to "openssl verify" to accept a certificate policy OID. + Hmm, looks like it already has an undocumented -policy switch which + might do the right thing (if I could figure out what it does...). - "openssl verify" only accepts PEM, not DER, which is annoying. - Probably need to add an -inform switch. + Needs an -inform switch. - Right way to handle error reporting from xxx_canonize() functions is almost certainly a callback; this would fit fairly well with the -- cgit v1.2.3