Allow multiple entries without a Subject even if unique_subject == yes
authorMatt Caswell <matt@openssl.org>
Fri, 23 Feb 2018 19:48:11 +0000 (19:48 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 15 Mar 2018 12:51:34 +0000 (12:51 +0000)
commit5af88441f4fb1951a0672c0c0e1979cd44acdb69
treed88e289dfd03f3d3c8ca1fc6134e0303f1d196f7
parent2cedf79474ebc7bf910980f397decfaddec7122b
Allow multiple entries without a Subject even if unique_subject == yes

It is quite likely for there to be multiple certificates with empty
subjects, which are still distinct because of subjectAltName. Therefore
we allow multiple certificates with an empty Subject even if
unique_subject is set to yes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5444)
apps/ca.c
doc/man1/ca.pod