subject hash, with -hash a synonym kept around for backward
compatibility reasons.
PR: 650

PR: 424

PR: 458

NAME OPTIONS are a subset of OPTIONS, so just make it =head2!
Submitted by:
Reviewed by:
PR: 333

section to SUBJECT AND ISSUER NAME OPTIONS
Submitted by:
Reviewed by:
PR: 333

Submitted by:
Reviewed by:
PR:

PR: 332

Submitted by: David Waitzman <djw@bbn.com>
Reviewed by: Lutz Jaenicke
PR: [openssl.org #38]

Add default values for display by the 'ca' utility
to openssl.cnf

Update docs.

Document the -certopt option to the x509 utility.

Add no_issuer option.

Fix X509_print_ex() so it prints out newlines when
certain fields are omitted.

American variants.

This allows intermediate CAs to be created more easily.

PKCS12_create() now checks private key matches certificate.

Fix typo in x509 app.

Update docs.

New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.

Document the new DN printing options.

Change a few names to be more meaningful.

Fix typos in CA.pl docs.

to support multiple calls.

New function to retrieve email address from certificates and
requests.

serial numbers.

could rename too :-(

Submitted by:
Reviewed by:
PR:

in the x509 utility.

yet.

Add a function X509_STORE_CTX_purpose_inherit() which implements the logic
of "inheriting" purpose and trust from a parent structure and using a default:
this will be used in the SSL code and possibly future S/MIME.

Partial documentation of the 'verify' utility. Still need to document how all
the extension checking works and the various error messages.

in a table. Doesn't do too much yet.

Make the -<digestname> options in 'x509' affect all relevant
options.

Change the name of the 'notrust' options to 'reject' as this
causes less confusion and is a better description of the
effect.

A few constification changes.

and add an nseq manpage.

of the openssl utility commands...