Dr S N Henson srote:
>Kikuyo Nagamatsu wrote:
>> 
>> Hi, all
>> 
>> I need some advices.
>> I tried to creating request (and certificate) in UTF8 format.
>> Openssl can make UTF8 certificate from UTF8 request.
>> 
>
>I've added a -utf8 command line option and a utf8 config file option to
>the req command in OpenSSL 0.9.7-dev . It will appear in OpenSSL 0.9.7,
>please check out the next snapshot and let me know of any problems.
>
>Steve.

Thanks a lot!
I'm sure to get and check.

But actually I have one more favor..if it's possible.
Openssl CA application cannot handle UTF8 request.

1) It was working like this :

The Subjects Distinguished Name is as follows
countryName           :PRINTABLE:'JP'
stateOrProvinceName   :ASN.1 12:'
The string contains characters that are illegal for the ASN.1 type

2) So I modified  'apps/ca.c' as following:

1575a1576,1577
>               else if (str->type == V_ASN1_UTF8STRING)
>                       BIO_printf(bio_err,"UTF8STRING:'");
1588c1590,1591
<                        (str->type != V_ASN1_T61STRING)) ||
---
>                        //      (str->type != V_ASN1_T61STRING)) ||
>                                (str->type != V_ASN1_T61STRING) &&  (str->type != 
>V_ASN1_UTF8STRING)) ||
1602c1605,1606
<                               BIO_printf(bio_err,"\\0x%02X",*p);
---
>                         //    BIO_printf(bio_err,"\\0x%02X",*p);
>                               BIO_printf(bio_err,"\\0x%02X",(*p & 0x00ff));

3) And then it's working:

The Subjects Distinguished Name is as follows
countryName           :PRINTABLE:'ASN.1 :'JP'
stateOrProvinceName   :UTF8STRING:'ASN.1 
:'\0xE7\0xA5\0x9E\0xE5\0xA5\0x88\0xE5\0xB7\0x9D'
localityName          :UTF8STRING:'ASN.1 :'\0xE5\0xB9\0xB3\0xE5\0xA1\0x9A'
organizationName      :UTF8STRING:'ASN.1 
:'\0xE3\0x83\0xA1\0xE3\0x83\0xA9\0xE3\0x83\0xB3\0xE3\0x82\0xB8'
organizationalUnitName:UTF8STRING:'ASN.1 :'xxxxxxx'
commonName            :UTF8STRING:'ASN.1 :'zzzzz'

------------
As you know, I should have modified ASN1_PRINTABLE_type() in crypto/asn1/a_print.c.
But I haven't. It returns T61STRING type and I use this.

Thanks for your help, 
Kikuyo
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to