Hi Yihua,

Thank you very much for pointing out of a serious problem.

My guess is that interplay between 2 and 3 hieroglyphs is not a full story. What I see here I would name more generally:

1) Certain values of x509 v3 extensions for DN in request are not parsed correctly by X509V3_EXT_nconf during procedure of issuing a cert.

2) Certain values of multivalued RDN in request is not parsed correctly by X500::DN.pm during procedure of issuing a cert.

I am not sure if all of this could be fixed without patching of OpenSSL. Will look into it in the near future. Let me move further discussion of this topic to the devel list.

All the best, Sergei

жёрю╩╙ wrote:
Hi,Sergei

I give you a example to explain the "two word" meaning.because my english is
very bad.

"жпжп" are two words.and "жпжпжп" are three words.

if I set the addtional option for value="жпжп"ё╛the "sign and approve" operate
can work
but if I set the addtional option for value="жпжпжп",the "sign and approve"
operae don't work.
I will test again for this problem later.





-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to