Synchronise with openss.cnf

diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 6685cf1df1d3d7639351484df919773f49d72583..c8e1a61a11abcf96291861590285ca482e028b8d 100644 (file)
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -115,13 +115,12 @@ x509_extensions   = v3_ca # The extentions to add to the self signed cert
 
 # This sets a mask for permitted string types. There are several options. 
 # default: PrintableString, T61String, BMPString.
 
 # This sets a mask for permitted string types. There are several options. 
 # default: PrintableString, T61String, BMPString.

-# pkix  : PrintableString, BMPString.
-# utf8only: only UTF8Strings.
+# pkix  : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).

 # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
 # MASK:XXXX a literal mask value.
 # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
 # MASK:XXXX a literal mask value.

-# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
-# so use this option with caution!
-string_mask = nombstr
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only

 
 # req_extensions = v3_req # The extensions to add to a certificate request
 
 
 # req_extensions = v3_req # The extensions to add to a certificate request