Hi, openssl-developers,
I don't know if this is a bug or not but we got a problem.
I attached a solution patch (just one-line patch), so if it is
correct, please merge it to next release package.
Or if it is not correct, please tell me your opinions.
It is not dependent on Operating Systems.
Thank you.
* OpenSSL Details
OpenSSL 0.9.4 09 Aug 1999
built on: Wed Nov 3 18:42:28 JST 1999
platform: sunos-gcc
options: bn(64,32) md2(int) rc4(ptr,char) des(ptr,risc1,16,long) idea(int)
blowfish(idx)
compiler: gcc -O3 -mv8
* Application Details
x509 command
* Problem Description
We got an error when we tried to display certificate contents which
includes UTF8STRING in the Subject.
command:
% openssl x509 -text -in tmp.pem
The test certificate is below:
-----BEGIN X509 CERTIFICATE-----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=
-----END X509 CERTIFICATE-----
* Solution
I think UTF8STRING should be interpreted as PRINTABLE.
This is a solution patch.
*** crypto/asn1/asn1.h.org Tue Jun 22 08:58:59 1999
--- crypto/asn1/asn1.h Wed Feb 9 15:24:35 2000
***************
*** 339,344 ****
--- 339,345 ----
pp,a->type,V_ASN1_UNIVERSAL)
#define M_d2i_ASN1_PRINTABLE(a,pp,l) \
d2i_ASN1_type_bytes((ASN1_STRING **)a,pp,l, \
+ B_ASN1_UTF8STRING| \
B_ASN1_PRINTABLESTRING| \
B_ASN1_T61STRING| \
B_ASN1_IA5STRING| \
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Mine Sakurai E-mail: [EMAIL PROTECTED]
Platform Technology Laboratory,
Internet Technology Laboratories, NEC Corp., Tokyo, JAPAN
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
