Hi,
I was looking at gnutls_x509_crt_get_dn() as a way to generate string
representations of DNs according to RFC4514. But there are two things
that strike me as being out of spec:
- The order of RDNs is wrong. GnuTLS outputs them first-to-last, but
RFC4514 states:
"...the output consists of the string encodings of each
RelativeDistinguishedName in the RDNSequence (according to Section
2.2), starting with the last element of the sequence and moving
backwards toward the first."
You can also see this in their examples:
"UID=jsmith,DC=example,DC=net"
The leaf being first, rather than last.
- The oid list includes some things not in the IANA registry. E.g.
1.3.6.1.4.1.311.60.2.1.3 and XmppAddr.
The oid list also seems a bit arbitrary, which could make
interoperability a bit annoying. :/
Thoughts?
Regards
--
Pierre Ossman Software Development
Cendio AB https://cendio.com
Teknikringen 8 https://twitter.com/ThinLinc
583 30 Linköping https://facebook.com/ThinLinc
Phone: +46-13-214600 https://plus.google.com/+CendioThinLinc
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help
