It seems the old CA.pl file used -preserveDN when signing a certificate,
adding
this created a certificate with the correct subject whether name_opt and
cert_opt
are commented out or not
# openssl x509 -subject -in test.name_opt.preserveDN.crt -noout
subject= /DC=uk/DC=ac/DC=st-andrews/CN=OracleContext/CN=dunktest
# openssl x509 -subject -in test.no_name_opt.preserveDN.crt -noout
subject= /DC=uk/DC=ac/DC=st-andrews/CN=OracleContext/CN=dunktest
Thanks for the help
Duncan
.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]