Add -force_pubkey -multivalue-rdn -set_issuer -set_subject -utf8 to x509 app
authorjob <job@openbsd.org>
Fri, 12 Jan 2024 11:24:02 +0000 (11:24 +0000)
committerjob <job@openbsd.org>
Fri, 12 Jan 2024 11:24:02 +0000 (11:24 +0000)
commit0293fcf84b774f6b132df4502b0b7e376322bf76
tree3ef081bcb37c17b048419c587adeeb950a40602c
parentba323c9d8ace70c3eedb1784b5e14b0197165931
Add -force_pubkey -multivalue-rdn -set_issuer -set_subject -utf8 to x509 app

The -set_issuer, -set_subject, and -force_pubkey features can be used to
'rechain' PKIs, for more information see https://labs.apnic.net/nro-ta/
and https://blog.apnic.net/2023/12/14/models-of-trust-for-the-rpki/

OK tb@
regress/usr.bin/openssl/appstest.sh
usr.bin/openssl/openssl.1
usr.bin/openssl/x509.c