> On Tue, Apr 02, 2002 at 09:25:00AM +0200, Michael Bell wrote:
> > after I found the wrong definitions of SN_surname and SN_serialNumber I
> > looked around and find the next problems in crypto/objects/ :
> >
> > SN_title "title" (now "T")
> > SN_description "description" (now "D")
> > SN_givenName "gn" (now "G")
> > SN_initials "initials" (now "I")
> > LN_uniqueIdentifier "x500UniqueIdentifier" (now "uniqueIdentifier")
> > SN_rfc822Mailbox "mail" (now "rfc822Mailbox")
> > SN_pkcs9_emailAddress "emailAddress" (now "Email")
> >
> > * SN_rfc822Mailbox is not wrong but a short name exists
> > * I don't find a short name for SN_pkcs9_emailAddress. The related RFC
> > only defines a long name
I know this patch was old, but I only just tripped over a problem with
it; the Microsoft CA still puts email addresses into DNs if you're not
careful.
Several software packages out there still *use* the short name "email"
in DNs, making it challenging to compare DNs produced by other code with
DNs produced by OpenSSL.
Is it too late to put the short-form back?
--
Harald Koch <[EMAIL PROTECTED]>
"It takes a child to raze a village."
-Michael T. Fry
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
