Hi Dmitrij,

Johnny described a similar problem. OpenCA uses the ASCII encoding of OpenSSL for distinguished names. UTF-8 support is a big todo for us. OpenSSL 0.9.8 fully supports now UTF-8. OpenSSL 0.9.7 support -utf8 at the req tool but not for the ca tool.

Dmitrij Mironov wrote:

I want to ask about changing character set in DN fields. As I see in
pub.conf I have LATIN1_LETTERS by default.
DN_TYPE_BASIC_ELEMENT_2_CHARACTERSET   "LATIN1_LETTERS"

Please forget this. This is only a keyword for a regex which scans the input for illegal characters. It has nothing to do with a real encoding spec. I would propose the following:

1. migrate CVS HEAD to OpenSSL 0.9.8
2. test how -utf8 integration works
3. check the HEAD for a way to backport this to 0.9.2

Any other ideas or proposals?

Sorry that there is no easy way

Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to