i've discovered that `req -nameopt` is implemented but undocumented. `req -subject` is implemented and documented in the usage, but not in the manual.
`crl -nameopt` was not implemented, i quickly hacked it in (we want a sane output format for openca), patch is attached. documentation should be added... rj
diff -ru orig/openssl-SNAP-20020427/apps/crl.c openssl-SNAP-20020427/apps/crl.c --- orig/openssl-SNAP-20020427/apps/crl.c Fri Feb 22 15:02:16 2002 +++ openssl-SNAP-20020427/apps/crl.c Mon Apr 29 19:16:51 2002 @@ -87,6 +87,7 @@ " -noout - no CRL output\n", " -CAfile name - verify CRL using certificates in file \"name\"\n", " -CApath dir - verify CRL using certificates in \"dir\"\n", +" -nameopt arg - various certificate name options\n", NULL }; @@ -97,6 +98,7 @@ int MAIN(int argc, char **argv) { + unsigned long nmflag = 0; X509_CRL *x=NULL; char *CAfile = NULL, *CApath = NULL; int ret=1,i,num,badops=0; @@ -105,7 +107,7 @@ char *infile=NULL,*outfile=NULL; int hash=0,issuer=0,lastupdate=0,nextupdate=0,noout=0,text=0; int fingerprint = 0; - char **pp,buf[256]; + char **pp; X509_STORE *store = NULL; X509_STORE_CTX ctx; X509_LOOKUP *lookup = NULL; @@ -188,6 +190,11 @@ text = 1; else if (strcmp(*argv,"-hash") == 0) hash= ++num; + else if (strcmp(*argv,"-nameopt") == 0) + { + if (--argc < 1) goto bad; + if (!set_name_ex(&nmflag, *(++argv))) goto bad; + } else if (strcmp(*argv,"-issuer") == 0) issuer= ++num; else if (strcmp(*argv,"-lastupdate") == 0) @@ -271,9 +278,7 @@ { if (issuer == i) { - X509_NAME_oneline(X509_CRL_get_issuer(x), - buf,256); - BIO_printf(bio_out,"issuer= %s\n",buf); + print_name(bio_out, "issuer=", X509_CRL_get_issuer(x), +nmflag); } if (hash == i) diff -ru orig/openssl-SNAP-20020427/apps/req.c openssl-SNAP-20020427/apps/req.c --- orig/openssl-SNAP-20020427/apps/req.c Wed Apr 17 12:00:48 2002 +++ openssl-SNAP-20020427/apps/req.c Mon Apr 29 18:55:54 2002 @@ -505,6 +505,7 @@ BIO_printf(bio_err," -extensions .. specify certificate extension section (override value in config file)\n"); BIO_printf(bio_err," -reqexts .. specify request extension section (override value in config file)\n"); BIO_printf(bio_err," -utf8 input characters are UTF8 (default ASCII)\n"); + BIO_printf(bio_err," -nameopt arg - various certificate name +options\n"); goto end; }