Underscore is not a valid character for PRINTABLESTRING's, however it is for
IA5STRING. It seems that keytool has encoded the component of the name that
contains the underscore as a PRINTABLESTRING, and therefore has produced an
illegal ASN.1 encoding. Perhaps you should avoid using the underscore.
> -----Original Message-----
> From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
> Sent: Friday, April 27, 2001 5:14 PM
> To: [EMAIL PROTECTED]
> Subject: Illegal characters ASN.1 type
>
>
>
>
> I'm using Java keytool to generate my certificate request and then openssl
> to
> sign the certs.
> If I use the underscore character ( _ ) when the keytool asks for the DN,
> I get
> an error when I try to sign for this DN with openssl.
>
> The error is;
>
> "The string contains characters that are illegal for the ASN.1 type."
>
> Is there a way to avoid this ?? Some of the machines I want to sign certs
> for
> have a " _ " in the name . I'm not able to sign certs for these ??
>
> Thanx in advance
>
> Shobhit
> --------------------------------------------------------------------------
> -----------
> "This email message and files transmitted with it are confidential,
> proprietary
> and legally privileged. If the message that is received is an error, or if
> there
> is any mistransmission, the originator must be notified immediately
> as the
> unauthorized use, dissemination, publication, transfer or any other use
> of the
> message by unauthorized person is strictly forbidden by law and
> prohibited. If
> anybody commits violation then he would be legally liable and punishable
> under
> the relevant law. The intended recipient can be rest assured
> that the
> confidentiality and privilege is not waived or lost by any such
> mistransmission.
>
> Internet communications are not secure unless it is protected by using
> strong
> cryptography. TCS does not accept any responsibility whatsoever for
> changes in
> the nature of modifications, additions, deletions made to the message once
> it is
> sent.
>
> TCS reserves the right to monitor all e-mail communications
> through its
> network."
> --------------------------------------------------------------------------
> -----------
>
> Tata Consultancy Services
> www.tcs.com
>
>
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
