Add apps/x509 -set_issuer & -set_subject option to override issuer & subject
authorJob Snijders <job@sobornost.net>
Wed, 10 Jan 2024 17:15:52 +0000 (17:15 +0000)
committerTomas Mraz <tomas@openssl.org>
Mon, 15 Jan 2024 09:40:01 +0000 (10:40 +0100)
commit4e5bf933131863e0459d7b39931d464fef77b078
tree1ca2f5c4702aa4d977c9aa5b0462e79e593473e7
parentdf04e81794ac3083804c34c173eb2b2fa55d373d
Add apps/x509 -set_issuer & -set_subject option to override issuer & subject

This changeset adds the counterpart to the '-subj' option to allow overriding
the Issuer. For consistency, the `-subj` option is aliased to `-set_subject`.

The issuer can be specified as following apps/openssl x509 -new -set_issuer
'/CN=example-nro-ta' -subj '/CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13' ...

This is useful in constructing specific test-cases or rechaining PKI trees

Joint work with George Michaelson (@geeohgeegeeoh)

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23257)
CHANGES.md
apps/x509.c
doc/man1/openssl-x509.pod.in
test/recipes/25-test_x509.t