On 02-03-22 16:17:02 CET, Marco Nardelli wrote:
> Hi all,
> 
> I have the following problem, when issuing a SPKAC request to  a CA
> built on OpenSSL I need to put a "'" (single quote) character
> in the DN (i.e. CN = D'Angelo Riccardo or CN = O'Reilly Tim).
> On the RA side no problems when formatting the request.
> When passing it to the CA the request is fulfilled and no errors or
> warning are displayed BUT when I go to have a look to the
> issued certificate I see that the DN has been AUTOMATICALLY converted to
> "DAngelo Riccardo" or "OReilly Tim" with no warnings (!)
> 
> How to handle this?
> 
> Is it possible to configure OpenSSL to accept "special chars" ?

while i've got openssl 0.9.6c, i doubt that it poses the problem.
i just generated a certificate using a SPKAC file with a CN that
contains a '.
`openssl x509` on that certificate prints the line:

        Subject: C=IT, CN=D'Angelo Riccardo

can you tell whether the ' made it into the SPKAC file?
we need to find the spot where the character gets lost.

> Could the  only solution be to strip  "illegal" characters from the
> beginning?

pardon?

' surely is no illegal character in a DN.

rj

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to