On Mon, Aug 04, 2003, Aleix Conchillo Flaque wrote:

> 
> hi!
> 
> is there any way to do a "copy_extension = copy" as in 0.9.7 in version 0.9.6?
> 

Sorry no there isn't. The reason was that the only safe way to do this is if
the user can clearly see what extensions they are consenting to add, otherwise
and attacker could get a request signed as a CA certificate.

This needed an overhaul of the ca program display code to work properly since
0.9.6 and earlier don't give any preview of the extensions added.

Steve.
--
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.demon.co.uk/
Email: [EMAIL PROTECTED], PGP key: via homepage.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to