On Sat, Nov 20, 2010, Sean Leonard wrote: > bump. Anyone? Does anyone know how to encode a distinguished name > attribute as something other than a DirectoryString? Is it even possible > with the command-line tools? >
It isn't possible with the command line tools and far from straight forward at an API level either. There is an assumption that goes back to the SSLeay days that DN components can be treated as string types and constructed types such as a SEQUENCE would need API enhancements to work. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org