Deleted Added
full compact
x509v3_config.pod (256281) x509v3_config.pod (267258)
1=pod
2
3=for comment openssl_manual_section:5
4
5=head1 NAME
6
7x509v3_config - X509 V3 certificate extension configuration format
8

--- 287 unchanged lines hidden (view full) ---

296 indirectCRL=TRUE
297 onlysomereasons=keyCompromise, CACompromise
298
299 [issuer_sect]
300 C=UK
301 O=Organisation
302 CN=Some Name
303
1=pod
2
3=for comment openssl_manual_section:5
4
5=head1 NAME
6
7x509v3_config - X509 V3 certificate extension configuration format
8

--- 287 unchanged lines hidden (view full) ---

296 indirectCRL=TRUE
297 onlysomereasons=keyCompromise, CACompromise
298
299 [issuer_sect]
300 C=UK
301 O=Organisation
302 CN=Some Name
303
304
304
305=head2 Certificate Policies.
306
307This is a I<raw> extension. All the fields of this extension can be set by
308using the appropriate syntax.
309
310If you follow the PKIX recommendations and just using one OID then you just
311include the value of that OID. Multiple OIDs can be set separated by commas,
312for example:

--- 72 unchanged lines hidden (view full) ---

385
386Examples:
387
388 nameConstraints=permitted;IP:192.168.0.0/255.255.0.0
389
390 nameConstraints=permitted;email:.somedomain.com
391
392 nameConstraints=excluded;email:.com
305=head2 Certificate Policies.
306
307This is a I<raw> extension. All the fields of this extension can be set by
308using the appropriate syntax.
309
310If you follow the PKIX recommendations and just using one OID then you just
311include the value of that OID. Multiple OIDs can be set separated by commas,
312for example:

--- 72 unchanged lines hidden (view full) ---

385
386Examples:
387
388 nameConstraints=permitted;IP:192.168.0.0/255.255.0.0
389
390 nameConstraints=permitted;email:.somedomain.com
391
392 nameConstraints=excluded;email:.com
393issuingDistributionPoint = idp_section
394
393
394
395=head2 OCSP No Check
396
397The OCSP No Check extension is a string extension but its value is ignored.
398
399Example:
400
401 noCheck = ignored
402

--- 127 unchanged lines hidden ---
395=head2 OCSP No Check
396
397The OCSP No Check extension is a string extension but its value is ignored.
398
399Example:
400
401 noCheck = ignored
402

--- 127 unchanged lines hidden ---