openssl/doc/man5
Dr. David von Oheimb 1a683b80dc apps/{ca,req,x509}.c: Improve diag and doc mostly on X.509 extensions, fix multiple instances
This includes a general correction in the code (now using the X509V3_CTX_REPLACE flag)
and adding a prominent clarification in the documentation:

    If multiple entries are processed for the same extension name,
    later entries override earlier ones with the same name.

This is due to an RFC 5280 requirement - the intro of its section 4.2 says:

    A certificate MUST NOT include more than one instance of a particular extension.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13614)
2020-12-10 15:19:55 +01:00
..
config.pod rand: add a provider side seed source. 2020-12-09 12:20:32 +10:00
fips_config.pod Add option to fipsinstall to disable fips security checks at run time. 2020-09-18 14:20:50 +01:00
x509v3_config.pod apps/{ca,req,x509}.c: Improve diag and doc mostly on X.509 extensions, fix multiple instances 2020-12-10 15:19:55 +01:00