Hello everybody,
I want to ask for help, once again as always, in my
problem with the OIDs processing in OpenCA. This is
the context. I'm registering the requests in OpenCA
through the Public Interface using the "Server Request
[PKCS#10 PEM formatted Request]" option.
I sign the request in the RA, then when I issue the
certificate in the CA, the OIDs I have to add to my
certificates are gettting erroneous characters like
.
So I did a debug of the issuance procedure and I found
where is OpenCA code adding these erroneous
characters. The problem starts in OpenSSL.pm in perl
libraries.
before the line 1110 (aprox):
my $dn_obj = X500::DN->ParseRFC2253 ($subject);
the variable $subject has the correct DN if I print it
I get this DN:
serialNumber=7,1.3.6.1.4.1.4710.1.3.2=#1309383030313233343536,1.3.6.1.4.1.4710.1.3.1=#13083739393832323232,2.5.4.9=#130A63726120323020426973,C=CO,O=dsf,OU=Internet,CN=450
but after that line and line 1118 (aprox):
$subject = $dn_obj->getOpenSSLString ();
The subject is getting the erroneous characters, if I
print it I get this:
/CN=450/OU=Internet/O=dsf/C=CO/2.5.4.9= cra 20
Bis/1.3.6.1.4.1.4710.1.3.1=79982222/1.3.6.1.4.1.4710.1.3.2=
800123456/serialNumber=7
So, I'd like to know if there is a bug or some kind of
decoding problem in those methods (subs), that is
adding the characters I don't want in my certificates.
What changes should I perform in those methods to
avoid this strange behaviour?
The other idea I have is to take the subject those
methods are returning me (
/CN=450/OU=Internet/O=dsf/C=CO/2.5.4.9= cra 20
Bis/1.3.6.1.4.1.4710.1.3.1=79982222/1.3.6.1.4.1.4710.1.3.2=
800123456/serialNumber=7) and change those characters
using the same perl code, as you can see in the
example shown above, the erroneous characters are:
unicode "0013" and unicode "0008" in some cases they
are other like "0006" or "0012".
Here we know nothing about perl, So I was wondering if
someone here could give me a piece of perl code that
changes those characters, so I can do that process
before calling the openssl command.
Can anyone help me?
Thanks a lot,
Johnny
______________________________________________
Renovamos el Correo Yahoo!
Nuevos servicios, más seguridad
http://correo.yahoo.es
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
