Howard Chu schrieb: > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Bell >
> > What do you want to say with this answer? The problem has nothing to do > > with signature verification. If you use "openssl x509" or any other > > openssl command then you will see a DN. The question is, why is the > > order (in which the DN is displayed) different from the one used for > > LDAP. Use X.500 the opposite order of LDAP? > > There is no bug, unless you consider LDAP itself a bug. Yes, LDAP uses the > opposite order from X.500. OpenSSL is using the correct (X.500) order. Until now I thought X.500 uses ASN.1 encoded DNs only and LDAP supports UTF-8 too. So there is a definition in X.500 how to transform ASN.1 encoded DNs to UTF-8? Best Regards, Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]