From 4b9e0b5f742141b69d391bd3db86659243c19be2 Mon Sep 17 00:00:00 2001
From: "Dr. Stephen Henson" <steve@openssl.org>
Date: Tue, 12 Jun 2012 13:41:18 +0000
Subject: [PATCH] print out issuer and subject unique identifier fields in
 certificates

---
 CHANGES              |  4 ++++
 crypto/asn1/t_x509.c | 18 ++++++++++++++++++
 crypto/x509/x509.h   |  1 +
 3 files changed, 23 insertions(+)

diff --git a/CHANGES b/CHANGES
index ec9291002b..21bff0eda1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 1.0.1 and 1.1.0  [xx XXX xxxx]
 
+  *) Print out deprecated issuer and subject unique ID fields in
+     certificates.
+     [Steve Henson]
+
   *) RFC 5878 support.
      [Emilia Kasper, Adam Langley, Ben Laurie (Google)]
 
diff --git a/crypto/asn1/t_x509.c b/crypto/asn1/t_x509.c
index edbb39a02f..8eb0b79a91 100644
--- a/crypto/asn1/t_x509.c
+++ b/crypto/asn1/t_x509.c
@@ -225,6 +225,24 @@ int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflags, unsigned long cflag)
 			}
 		}
 
+	if(!(cflag & X509_FLAG_NO_IDS))
+		{
+		if (ci->issuerUID)
+			{
+			if (BIO_printf(bp,"%8sIssuer Unique ID: ","") <= 0) 
+				goto err;
+			if (!X509_signature_dump(bp, ci->issuerUID, 12))
+				goto err;
+			}
+		if (ci->subjectUID)
+			{
+			if (BIO_printf(bp,"%8sSubject Unique ID: ","") <= 0) 
+				goto err;
+			if (!X509_signature_dump(bp, ci->subjectUID, 12))
+				goto err;
+			}
+		}
+
 	if (!(cflag & X509_FLAG_NO_EXTENSIONS))
 		X509V3_extensions_print(bp, "X509v3 extensions",
 					ci->extensions, cflag, 8);
diff --git a/crypto/x509/x509.h b/crypto/x509/x509.h
index 092dd7450d..14ef1d3aad 100644
--- a/crypto/x509/x509.h
+++ b/crypto/x509/x509.h
@@ -372,6 +372,7 @@ typedef struct x509_cert_pair_st {
 #define	X509_FLAG_NO_SIGDUMP		(1L << 9)
 #define	X509_FLAG_NO_AUX		(1L << 10)
 #define	X509_FLAG_NO_ATTRIBUTES		(1L << 11)
+#define	X509_FLAG_NO_IDS		(1L << 12)
 
 /* Flags specific to X509_NAME_print_ex() */	
 
-- 
2.34.1