If you do figure out a way to do it, and decide that you really want to.
Another word of caution is that many apps will puke when you try to
import a cert whose DN doesn't match the CSR. I've seen some apps have
problems even with re-ordering the DN fields, let alone complete
changes. =20

You're far better off, ensuring that CSRs match the DN format that you
want, rather then trying to change it while signing it.

-----Original Message-----
From: owner-openssl-users@openssl.org
[mailtowner-openssl-users@openssl.org] On Behalf Of Richard Levitte -
VMS Whacker
Sent: Friday, September 29, 2006 2:26 AM
To: openssl-users@openssl.org; ij@internet2.edu
Subject: Re: rewriting Subject to make O=3DCN?

In message <20060929053130.GB4135@localhost.localdomain> on Fri, 29 Sep
2006 01:31:32 -0400, Iljun Kim said:

ij> I'd like to make the "O" equal to the "CN" while sign the CSR. =20
ij> For example, if the Subject was=20
ij> "C=3DUS, O=3DExample Company, CN=3Dwww.example.com",=20
ij> I'd like to issue a cert with=20
ij> "C=3DUs, O=3Dwww.exmaple.com, CN=3Dwww.example.com".
ij>=20
ij> I searched man pages and configuration options, but couldn't figure
it
ij> out.
ij>=20
ij> Any help would appreciated.

To begin with, there's no way to do that that I know of.

That said, I've a question to you: why? Why on earth would you want
to do that? What does it give you in terms of security and usability?

Quite honestly, that kind of reconstruction (or general messing
around) usually means that someone has misunderstood something about
distinguished names.

Cheers,
Richard

-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

--=20
Richard Levitte richard@levitte.org
http://richard.levitte.org/

"When I became a man I put away childish things, including
the fear of childishness and the desire to be very grown up."
-- C.S. Lewis
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org

__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org