On Feb 23, 2009, at 11:49 AM, Stef wrote:
Kurt Zeilenga wrote:
On Feb 20, 2009, at 6:11 PM, Stef wrote:
I'm working on using openldap to store certificate requests (ie:
PKCS#10
and SPKAC).
I thought I'd use the binary syntax '1.3.6.1.4.1.1466.115.121.1.5'
for
my custom attribute.
Why? This syntax should be avoided. It was dropped with revised
LDAP
specifications (RFC 4510) for good reason. Any uses of it will
suffer
significant interoperability problems.
Interesting. Thanks for the clear reply.
I guess that means that uses of the userSMIMECertificate and
userPKCS12
attributes in openldap will encounter these problems. These are both
defined with the syntax of '1.3.6.1.4.1.1466.115.121.1.5'.
Yes, and such problems have been previously raised on openldap-software.
