On Tue, Jul 8, 2014 at 4:48 PM, Barbe, Charles
<charles.ba...@allworx.com> wrote:
> Also don't these lines of the spec:
>
> countryName ATTRIBUTE ::= {
> WITH SYNTAX PrintableString (SIZE (2))
> -- IS 3166 codes only
> ID id-at-countryName }
>
> indicate that countryName is restricted to the PrintableString (SIZE (2))
> type which is a restricted subset of DirectoryString?
>
That may apply. I see it under "A.1. Explicitly Tagged Module, 1988
Syntax", but I'm not sure what the introduction is telling me in
Appendix A.
If it matters... looking at CA and server certificates I created
using OpenSSL's API (a few months ago) show the country code is
PRINTABLESTRING in both.
Jeff
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
