openssl 发行者/主题格式差异

Question

我得到了两个 OpenSSL 版本的不同发行者/主题格式:OpenSSL 1.1.1 和 OpenSSL 1.0.2n。 1.1.1 版本可以像 1.0.2n 那样格式化主题/发行者吗？

$ openssl x509 -in cert.pem -noout -issuer

# 1.1.1 11 Sep 2018
issuer=C = RU, O = TestOrg, OU = TestOrg Certification Authority, CN = rsa

# 1.0.2n 7 Dec 2017
issuer= /C=RU/O=TestOrg/OU=TestOrg Certification Authority/CN=rsa

Answer 1

您需要使用“-nameopt 兼容”option .例如

openssl x509 -in cert.pem -noout -issuer -nameopt compat

来自文档:

-nameopt option

option which determines how the subject or issuer names are displayed. The option argument can be a single option or multiple options separated by commas. Alternatively the -nameopt switch may be used more than once to set multiple options. See the NAME OPTIONS section for more information.

和

compat

use the old format. This is equivalent to specifying no name options at all.