Categorise self-signed certificates as a single issuer rather than as…

… many unique issuers.

build/probe_certs.pl

@@ -62,24 +62,26 @@
 	#
 	# Use openssl to convert the certificate to text
 	#
-	my(@lines, $issuer, $subjectCN, $issuerCN);
+	my(@lines, $subject, $issuer);
 	$cmd = "openssl x509 -in $temp_der -inform der -noout -text -nameopt RFC2253 -modulus |";
 	open(SSL, $cmd) || die "could not open openssl subcommand";
 	while (<SSL>) {
 		push @lines, $_;
 		if (/^\s*Issuer:\s*(.*)$/) {
 			$issuer = $1;
 			#print "$hostPort: issuer is $issuer\n";
-			$issuers{$issuer}{$loc} = 1;
-			$numissued++;
-			if ($issuer =~ /CN=([^,]+)/) {
-				$issuerCN = $1;
-			} else {
-				$issuerCN = $issuer;
-			}
 		}
+		if (/^\s*Subject:\s*(.*)$/) {
+			$subject = $1;
+		}
+	}
+
+	if ($subject eq $issuer) {
+		$issuer = "(self signed certificate)";
 	}
 
+	$issuers{$issuer}{$loc} = 1;
+	$numissued++;
 }
 print "\n\n";