Oliver Welter wrote: > I imported it over public interface as pkcs10 and worked fine, now I > want to edit the request and get: > > OpenCA: Allgemeiner Fehler 700: The compilation of the command > cmdEditCSR failed. Can't call method "getRDNs" on an undefined value at > /usr/local/openca/openca/lib/cmds/editCSR line 114.<br> > > When looking at the csr with openssl I see some unprintable OIDs and > some strange data in the Extensions: > > Attributes: > 1.3.6.1.4.1.311.13.2.3 :5.2.3790.2 > 1.3.6.1.4.1.311.13.2.2 :unable to print attribute > Requested Extensions: > > S/MIME Capabilities:......0...+....0050...*.H.. > ..*.H.. > > Any ideas ??
This error can happen when the DN contains the characters ,=+<>#; Internally these characters must be quoted with a backslash, but it seems that this does not happen everywhere. We modified pkcs10_req so it rejects requests with such characters, and extended the existing quoting mechanism in basic_csr to cover all of them. Best regards, Juergen
smime.p7s
Description: S/MIME Cryptographic Signature
