Hello Dmitrij, As Michael said, I used to have this problem before, so the good news for me is that some of our requests come in pkcs#10 format, PEM base64 encoded requests, so the temporary solution we have is when we create those requests using OpenSSL, we use the option -utf8, then we insert them in OpenCA using the "Server Request" and we process them as usual. If you see one of the genereated certificates using "openssl asn1parse" you can see the specific characters of your language (at least with spanish works) as they must.
Hope this can help you. Johnny. --- Dmitrij Mironov <[EMAIL PROTECTED]> escribió: > Thanks Michael for the answers. > > As I understand, there is no easy way for now to > issue certificates with > international characters using OpenCA. > That's bad news... > I'm not a programmer to change OpenCA code to work > with OpenSSL 0.9.8. > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] > On Behalf > > Of Michael Bell > > Sent: Tuesday, July 12, 2005 2:36 PM > > To: [email protected] > > Subject: Re: [Openca-Users] DN fields with > international letters > > > > Hi Dmitrij, > > > > Johnny described a similar problem. OpenCA uses > the ASCII > > encoding of OpenSSL for distinguished names. UTF-8 > support is > > a big todo for us. > > OpenSSL 0.9.8 fully supports now UTF-8. OpenSSL > 0.9.7 support > > -utf8 at the req tool but not for the ca tool. > > > > Dmitrij Mironov wrote: > > > > > I want to ask about changing character set in DN > fields. As > > I see in > > > pub.conf I have LATIN1_LETTERS by default. > > > > > > DN_TYPE_BASIC_ELEMENT_2_CHARACTERSET > "LATIN1_LETTERS" > > > > Please forget this. This is only a keyword for a > regex which > > scans the input for illegal characters. It has > nothing to do > > with a real encoding spec. I would propose the > following: > > > > 1. migrate CVS HEAD to OpenSSL 0.9.8 > > 2. test how -utf8 integration works > > 3. check the HEAD for a way to backport this to > 0.9.2 > > > > Any other ideas or proposals? > > > > Sorry that there is no easy way > > > > Michael > > -- > > > _______________________________________________________________ > > > > Michael Bell > Humboldt-Universitaet zu Berlin > > > > Tel.: +49 (0)30-2093 2482 ZE Computer- und > Medienservice > > Fax: +49 (0)30-2093 2704 Unter den Linden 6 > > [EMAIL PROTECTED] D-10099 Berlin > > > _______________________________________________________________ > > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by the 'Do More With > Dual!' webinar happening > July 14 at 8am PDT/11am EDT. We invite you to > explore the latest in dual > core and dual graphics technology at this free one > hour event hosted by HP, > AMD, and NVIDIA. To register visit > http://www.hp.com/go/dualwebinar > _______________________________________________ > Openca-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openca-users > ______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es ------------------------------------------------------- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
