diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2009-11-28 00:48:15 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2009-11-28 00:48:15 +0200 |
| commit | 02ee5842f8f5f37ee93e258d5edfc2560b00ac2c (patch) | |
| tree | e0f2d7791eab690a931196570b92a5d9cf8a7ede /NEWS | |
| parent | 3d8da5765133c6ced37bf29b5a07f950b8c26cd7 (diff) | |
| download | gnutls-02ee5842f8f5f37ee93e258d5edfc2560b00ac2c.tar.gz | |
Documented certtool's certificate request generation fix.
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -5,6 +5,14 @@ See the end for copying conditions. * Version 2.9.10 (unreleased) +** certtool: Corrected two issues that affected certificate request generation. +(1) Null padding is added on integers (found thanks to Wilankar Trupti), +(2) In optional SignatureAlgorithm parameters field for DSA keys the DSA +parameters were added. Those were rejected by Verisign. Gnutls no longer adds +those parameters there since other implementations don't do either and having +them does not seem to offer anything (anyway you need the signer's certificate +to verify thus public key will be available). Found thanks to Boyan Kasarov. + ** certtool: Allow exporting of Certificate requests on DER format. ** certtool: New option --no-crq-extensions to avoid extensions in CSRs. |