ultimately lead to certificate chain verification. It is
VERY EXPERIMENTAL at present though.

on the command line for various utilities.

and to lots of PEM_... functions.
Submitted by: Damien Miller <dmiller@ilogic.com.au>

signers parameters. Changed it to never omit parameters.

doesn't have a default value like the "-config" options of other
openssl subprograms.

Submitted by:
Reviewed by:
PR:

addition to RSA certificates) to match the behaviour of `openssl dsa -noout
-modulus' as it's already the case for `openssl rsa -noout -modulus'.  For RSA
the -modulus is the real "modulus" while for DSA currently the public key is
printed (a decision which was already done by `openssl dsa -modulus' in the
past) which serves a similar purpose.  Additionally the NO_RSA no longer
completely removes the whole -modulus option; it now only avoids using the RSA
stuff. Same applies to NO_DSA now, too.

openssl.cnf for the new syntax.

the main library, but only with printing at present. To see this try:
openssl x509 -in cert.pem -text
on a certificate with some extensions in it.

GeneralizedTime.

handling to x509.c