openssl seems to restrict some of the fields, it does not allow underscores ( _ ), for instance.
As I understand it, the standard would allow “directory string”, which is a choice from minimum
PrintableString (a-z,A-Z,0-9, = ( ) + , - . / : ? and space), which does not allow @ and _ , via TeleTextString
and UniversalString to Utf8String.
UTF8 for x.509 is not well implemented in different implementations, eg. the Java Keytool.
We avoid anything beyond PrintableString and use only “-” and “/” as special characters.
But this is only pragmatism....
Best regards
Michael
Am 2002-11-06 10:05 Uhr schrieb "CALinux" unter <[EMAIL PROTECTED]>:
Hi everyone,
we are using OpenCA and OpenSSL. We want to create a certificate with special CN and DN
such as
CN=<surname>/<name>/<fiscal code>
DN="C="<surname>"/N="<name>"D="<birth date>
but OpenSSL don't accept this character, in fact when we put =/ it believe that is a second field with different value.
There is same special escape character?
Where can we found something about this?
Thank you.
CALinux Staff.
--
************************************************************************
Karl-Michael Werzowa
A-1190 Wien, Paradisgasse 28/4/6
+43 (664)302 4511, fax +43 (1)328 1992 14
[EMAIL PROTECTED], [EMAIL PROTECTED]
************************************************************************
