On Sun, Jul 29, 2012, Dave Thompson wrote: > > Note that X.509 certs (and ASN.1 generally) don't actually support > UTF8. They support several 1-byte codes (some now obsolete), BMPString > which is 2-byte UCS-2, and UniversalString which is 4-byte UCS-4. > I believe OpenSSL selects the smallest of these into which the > specified (Unicode) codepoints fit, which in this case is UCS-2. >
There is a UTF8String type which has been about for some time. OpenSSL for certificate requests uses the smallest of a set of types determined by the string_mask option in openssl.cnf. This is set to "utf8only" in OpenSSL 1.0.0 and later. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
