提交 37dccd8f 编写于 作者: D Dr. Stephen Henson

Update X509v3 docs.

上级 826a42a0
...@@ -164,6 +164,8 @@ The email option include a special 'copy' value. This will automatically ...@@ -164,6 +164,8 @@ The email option include a special 'copy' value. This will automatically
include and email addresses contained in the certificate subject name in include and email addresses contained in the certificate subject name in
the extension. the extension.
The IP address used in the B<IP> options can be in either IPv4 or IPv6 format.
The value of B<dirName> should point to a section containing the distinguished The value of B<dirName> should point to a section containing the distinguished
name to use as a set of name value pairs. Multi values AVAs can be formed by name to use as a set of name value pairs. Multi values AVAs can be formed by
preceeding the name with a B<+> character. preceeding the name with a B<+> character.
...@@ -175,6 +177,8 @@ ASN1_generate_nconf() format. ...@@ -175,6 +177,8 @@ ASN1_generate_nconf() format.
Examples: Examples:
subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/ subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/
subjectAltName=IP:192.168.7.1
subjectAltName=IP:13::17
subjectAltName=email:my@other.address,RID:1.2.3.4 subjectAltName=email:my@other.address,RID:1.2.3.4
subjectAltName=otherName:1.2.3.4;UTF8:some other identifier subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
...@@ -284,6 +288,25 @@ The B<ia5org> option changes the type of the I<organization> field. In RFC2459 ...@@ -284,6 +288,25 @@ The B<ia5org> option changes the type of the I<organization> field. In RFC2459
it can only be of type DisplayText. In RFC3280 IA5Strring is also permissible. it can only be of type DisplayText. In RFC3280 IA5Strring is also permissible.
Some software (for example some versions of MSIE) may require ia5org. Some software (for example some versions of MSIE) may require ia5org.
=head2 Policy Constraints
This is a multi-valued extension which consisting of the names
B<requireExplicitPolicy> or B<inhibitPolicyMapping> and a non negative intger
value. At least one component must be present.
Example:
policyConstraints = requireExplicitPolicy:3
=head2 Inhibit Any Policy
This is a string extension whose value must be a non negative integer.
Example:
inhibitAnyPolicy = 2
=head1 DEPRECATED EXTENSIONS =head1 DEPRECATED EXTENSIONS
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册