Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OpenSSL option -no-CAstore only seems to be supported on OpenSSL 3.0 #5

Closed
joaocc opened this issue Mar 7, 2022 · 3 comments
Closed

OpenSSL option -no-CAstore only seems to be supported on OpenSSL 3.0 #5

joaocc opened this issue Mar 7, 2022 · 3 comments
Labels
good first issue Good for newcomers

Comments

@joaocc
Copy link
Contributor

joaocc commented Mar 7, 2022

Prob would be good to add mention to supported OpenSSL version
@egberts
Copy link
Owner

egberts commented Mar 10, 2022

openSSL v1.1.1k March 25, 2021

@egberts
Copy link
Owner

egberts commented Mar 10, 2022

8c0229d

egberts pushed a commit that referenced this issue Mar 10, 2022
Added supported version of OpenSSL to README.md
97b4074 
Alerted to this by issue #5 'OpenSSL option
-no-CAstore only seems to be supported on
OpenSSL 3.0'

Currently do not see any harm in a simple removal
of '-no-CAstore' for openssl-verify toward older
version.

For 'openssl verify' command, according to this
man page website
(https://www.openssl.org/docs/man1.1.1/man1/openssl-verify.html ):
In v1.0.2, there is no '-no-CAstore' option
In v1.1.1b, strangely, '-no-CAstore' is there, where I based my work on.
In v1.1.1k, there is no '-no-CAstore' option
In v3.0,   oops, THERE IT IS!

Both of us must be getting ahead of ourselves here.
egberts pushed a commit that referenced this issue Mar 10, 2022
@joaocc
Merge pull request #5 from kit-ar/configurable-extension-duration
71661cd 
CA extension duration configurable (overridable default)
@egberts egberts added the good first issue Good for newcomers label Mar 10, 2022
@egberts egberts closed this as completed Mar 10, 2022
@joaocc
Copy link
Contributor Author

joaocc commented Mar 10, 2022

Hi. Thanks. However, it seems that -no-CAstore is only recognized in OpenSSL3.
Btw, I installed openssl3 (and linked openssl to it) and everything seems to be working (CA generation, and maybe verification). Didn't rest cert yet (had some issues but no time yet).
Thanks

@egberts egberts mentioned this issue Mar 10, 2022
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
good first issue Good for newcomers
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@joaocc @egberts