Distinghished Name of X509 depend on version of ModSSL ?
am 04.11.2003 17:40:33 von Xavier JeanninHello
I want to extract the Distinghished Name of a X509 certificat for=20
checking the access of my HTTP server (see FakeBasicAuthentification)
with the new version of openssl I have the following result :
/usr/local/openssl-0.9.7c/apps/openssl x509 -noout -subject -in=20
/home/apache/htdocs/dess/intranetSTIC/UPS836-2003-2004.pem
subject=3D /C=3DFR/O=3DCNRS/OU=3DUPS836/CN=3DXavier=20
Jeannin/emailAddress=3DXavier.Jeannin@urec.cnrs.fr
with the old version of openssl of Redhat I have the following result :
/usr/bin/openssl x509 -noout -subject -in=20
/home/apache/htdocs/dess/intranetSTIC/UPS836-2003-2004.pem
subject=3D /C=3DFR/O=3DCNRS/OU=3DUPS836/CN=3DXavier=20
Jeannin/Email=3DXavier.Jeannin@urec.cnrs.fr
As Apache uses the DN to select the access on directory, my user cannot=20
access to my server because DN does not match anymore DN in password file=
..
the solution could be to change my files password file (htpasswd) but I=20
have lot of this kind of file
Is there any way to change the result of openssl command by=20
configuration at runtime or at compilation ?
thank you
--xj
--=20
____________________________________________________________ _____________=
____________________
Xavier Jeannin
UREC/CNRS Universit=E9 P. & M. Curie, Courrier : case 171, 4 place Jussie=
u 75252 PARIS CEDEX 05
T=E9l : 01 44 27 42 59 - Fax : 01 44 27 42 61 - Courriel : jeannin@urec.c=
nrs.fr
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org