It seems the old CA.pl file used -preserveDN when signing a certificate, adding this created a certificate with the correct subject whether name_opt and cert_opt
are commented out or not

# openssl x509 -subject -in test.name_opt.preserveDN.crt -noout
subject= /DC=uk/DC=ac/DC=st-andrews/CN=OracleContext/CN=dunktest
# openssl x509 -subject -in test.no_name_opt.preserveDN.crt -noout
subject= /DC=uk/DC=ac/DC=st-andrews/CN=OracleContext/CN=dunktest


Thanks for the help
Duncan
.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to