Michael Bell wrote:

Second problem is, openca constructs DN this way:
serialNumber=anyvalue,cn=John Doe, ou=certreq group,basedn
Is there any possibility to have DN of following syntax?
serialNumber=anyvalue+cn=John Doe, ou=certreq group,basedn
If I understand, RFC2253 allow this syntax, but not openca.

This is correct RFC2253 support such DNs. OpenCA 0.9.x should support these DNs too (at minimum 0.9.2 aka CVS HEAD will do it). The major problem is our LDAP support. I will start testing it but this takes two or three days.

Mmh, perhaps I was too fast. Until now I'm not able to create such certificates with OpenSSL. I checked the sourcecode of OpenSSL and it looks like they always interpret a subject as a liniear sequence.


Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to