Enrico Russo wrote: > > Hi, > I've some problems with string encoding. > > The Root Cert (created and self-signed with openssl) DN is : > > subject= /C=IT/ST=GE/L=Genova/O=Universit\xE0 di Genova/OU=Unige > CA/CN=unige [EMAIL PROTECTED] > > When I try to sign requests created with Microsoft IIS or IE the > organizationName field (with policy 'match') > doesn't match ... : > > Check that the request matches the signature > Signature ok > The Subjects Distinguished Name is as follows > commonName :PRINTABLE:'xxxx.csita.unige.it' > organizationalUnitName:PRINTABLE:'Unige CA' > organizationName :ASN.1 > 30:'^@U^@n^@i^@v^@e^@r^@s^@i^@t^@\0xFFFFFFE0^@ ^@d^@i^@ > ^@G^@e^@n^@o^@v^@a' > localityName :PRINTABLE:'Genova' > stateOrProvinceName :PRINTABLE:'GE' > countryName :PRINTABLE:'IT' > The organizationName field needed to be the same in the > CA certificate (Universit di Genova) and the request () > > There's a way to solve this problem ? > > Thanks > Per evitare problemi, le consiglio di usare solo "Universita" senza la lettera accentata... E' bruttino, ma non c'e' altro modo, anche modificando il codice di openssl in modo da accettare caratteri "NON PRINTABLE", poi incorre in molti problemi con i browser, fino al crash di netscape e/o explorer. Buon Lavoro. -- Dott. Sergio Rabellino Technical Staff Department of Computer Science University of Torino (Italy) Member of the Internet Society http://www.di.unito.it/~rabser Tel. +39-0116706701 Fax. +39-011751603 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
