On 02-05-23 13:11:55 CEST, Robert Hannemann wrote:
> Hello,
> 
> i�ve generated some Certs for Users with German Umlauts in her Names, so
> i could not add these Certs to my LDAP Server because the Character
> Encoding differs from the one the LDAP Server needs.
> 
> Example:
> 
> The Users Givenname is "B�rbel"
> 
> In the Certificate Subject-DN the GN was encoded as: "B\C3\A4rbel"

this is hopefully not its encoding in the certificate but the output of
a program you use to display it?

> In the Certificate CN the GN was encoded as: "Bärbel"

again, what exactly do you show here?

> when i make an LDAP-Add the Operation breaks with "B\C3\A4rbel". When i

this is RFC2253 hex escapes, which makes it ASCII-transportable.
at a certain point, it has to be de-escaped...

> change it to "Bärbel" it works.

well, you sent your mail ISO 8859-1 encoded, so this looks like literal
UTF-8.
if you had sent your mail UTF-8 encoded, the umlaut would have been
readable.

> Why there are two different Codings in the Certificate and how can i
> change the encoding in the Certificate CN-Part to "Bärbel" (wich
> code-set is it ?)

please send the certificate, i'd like to see whether it is encoded
correctly.

openssl has some documented bugs when it comes to non-ASCII characters,
i would be surprised if openca whould handle non-ASCII correctly
everywhere, and certain LDAP implementations may be buggy, too...

rj

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to