Johnny, A patch submitted a week ago, has not yet been processed by developers:
http://sourceforge.net/mailarchive/forum.php?thread_id=7947813&forum_id=2293 Actually this patch fixes much more chars that it was claimed to do. Sergei At 02:03 17.08.2005, you wrote: >Hello everybody, > >I want to ask for help, once again as always, in my >problem with the OIDs processing in OpenCA. This is >the context. I'm registering the requests in OpenCA >through the Public Interface using the "Server Request >[PKCS#10 PEM formatted Request]" option. > >I sign the request in the RA, then when I issue the >certificate in the CA, the OIDs I have to add to my >certificates are gettting erroneous characters like >. > >So I did a debug of the issuance procedure and I found >where is OpenCA code adding these erroneous >characters. The problem starts in OpenSSL.pm in perl >libraries. > >before the line 1110 (aprox): > >my $dn_obj = X500::DN->ParseRFC2253 ($subject); > >the variable $subject has the correct DN if I print it >I get this DN: >serialNumber=7,1.3.6.1.4.1.4710.1.3.2=#1309383030313233343536,1.3.6.1.4.1.4710.1.3.1=#13083739393832323232,2.5.4.9=#130A63726120323020426973,C=CO,O=dsf,OU=Internet,CN=450 > >but after that line and line 1118 (aprox): > >$subject = $dn_obj->getOpenSSLString (); > >The subject is getting the erroneous characters, if I >print it I get this: > >/CN=450/OU=Internet/O=dsf/C=CO/2.5.4.9=cra 20 >Bis/1.3.6.1.4.1.4710.1.3.1=79982222/1.3.6.1.4.1.4710.1.3.2= >800123456/serialNumber=7 > >So, I'd like to know if there is a bug or some kind of >decoding problem in those methods (subs), that is >adding the characters I don't want in my certificates. >What changes should I perform in those methods to >avoid this strange behaviour? > >The other idea I have is to take the subject those >methods are returning me ( >/CN=450/OU=Internet/O=dsf/C=CO/2.5.4.9=cra 20 >Bis/1.3.6.1.4.1.4710.1.3.1=79982222/1.3.6.1.4.1.4710.1.3.2= >800123456/serialNumber=7) and change those characters >using the same perl code, as you can see in the >example shown above, the erroneous characters are: >unicode "0013" and unicode "0008" in some cases they >are other like "0006" or "0012". >Here we know nothing about perl, So I was wondering if >someone here could give me a piece of perl code that >changes those characters, so I can do that process >before calling the openssl command. > >Can anyone help me? > >Thanks a lot, >Johnny > > > >______________________________________________ >Renovamos el Correo Yahoo! >Nuevos servicios, mАs seguridad >http://correo.yahoo.es > > >------------------------------------------------------- >SF.Net email is Sponsored by the Better Software Conference & EXPO >September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices >Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA >Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf >_______________________________________________ >Openca-Users mailing list >[email protected] >https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
