On Wed, Aug 11, 2010, Eisenacher, Patrick wrote: > Hi, > > I can make openssl's ca tool issue certificates with the subject's dname > encoded as UTF8String for requests with UTF-8 encoded subject dnames. > However, when I change the subject via the -subj commandline option, I can't > seem to get a certificate with a UTF-8 encoded subject dname. > > Here's what I see: > -subj is ascii string, no -utf8 commandline option -> PrintableString > -subj is ascii string, -utf8 commandline option -> PrintableString > -subj contains umlaut, no -utf8 commandline option -> TeletexString > -subj contains umlaut, -utf8 commandline option -> TeletexString > > This is with openssl v1.0.0-beta3 15 Juli 2009. > > > How can I make the ca tool encode the subject name given via the commandline > as UTF8String? >
Try adding a string_mask in the CA_default section of openssl.cnf and set it to utf8only. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
