in ssl_engine_vars, there seems to be a problem to me concerning the UID field.
The syntax for the field is a bitstring and not a "text".



static const struct {
   char *name;
   int   nid;
} ssl_var_lookup_ssl_cert_dn_rec[] = {
   { "C",     NID_countryName            },
   { "ST",    NID_stateOrProvinceName    }, /* officially    (RFC2156) */
   { "SP",    NID_stateOrProvinceName    }, /* compatibility (SSLeay)  */
   { "L",     NID_localityName           },
   { "O",     NID_organizationName       },
   { "OU",    NID_organizationalUnitName },
   { "CN",    NID_commonName             },
   { "T",     NID_title                  },
   { "I",     NID_initials               },
   { "G",     NID_givenName              },
   { "S",     NID_surname                },
   { "D",     NID_description            },
#if SSL_LIBRARY_VERSION >= 0x00907000
   { "UID",   NID_x500UniqueIdentifier   },
#else
   { "UID",   NID_uniqueIdentifier       },
#endif
   { "Email", NID_pkcs9_emailAddress     },
   { NULL,    0                          }
};


--

<http://www.edelweb.fr>
*Edel/W/eb*     Peter SYLVESTER
Consultant Sécurité des Systèmes d'Information
-----------------------------------------------------------
EdelWeb - Groupe ON-X
15, quai de Dion-Bouton
F-92816 Puteaux Cedex
Tel : +33.1.40.99.14.14 / Fax : +33.1.40.99.99.58
www.edelweb.fr <http://www.edelweb.fr> / www.on-x.com <http://www.on-x.com>
-----------------------------------------------------------
To verify the message signature, see edelpki.edelweb.fr <http://edelpki.edelweb.fr/> Cela vous permet de charger le certificat de l'autorité de racine <http://edelpki.edelweb.fr/cacerts/EdelPKI-ca.der>;
die Liste mit zurückgerufenen Zertifikaten finden Sie da auch.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to