Hello Oliver, I am not sure if the parser extracts this correct from the CSR, so please have a look to the workflow context if the elements are correct there. If this is the case it SHOULD work if you escape the comma with a backslash using the template toolkits replace method. ( something like [% O.0.replace(',','\') %] - see http://www.template-toolkit.org/docs/manual/VMethods.html#method_replace Thank you! :-)
O=[% O.0.replace(',','\,') %] Escaping with backslash using the replace method works. Log says: Rendering subject: CN=User Name Testing19,OU=SomeGroup,O=Company\, s.r.o. OpenSSL -text output (issued certificate): O=Company, s.r.o., OU=SomeGroup, CN=User Name Testing19 Michal Moravec On 30. 3. 2021, at 8:21, Oliver Welter <m...@oliwel.de<mailto:m...@oliwel.de>> wrote: Hi Michal, I am not sure if the parser extracts this correct from the CSR, so please have a look to the workflow context if the elements are correct there. If this is the case it SHOULD work if you escape the comma with a backslash using the template toolkits replace method. ( something like [% O.0.replace(',','\') %] - see http://www.template-toolkit.org/docs/manual/VMethods.html#method_replace Oliver Am 29.03.21 um 11:12 schrieb Michal Moravec: Hello, I am setting up SCEP enroll workflow. I have problem rendering subject when there are comma and space characters in the DN. CSR: SET { SEQUENCE { OBJECT IDENTIFIER organizationName (2 5 4 10) UTF8String 'Company, s.r.o.' } } Profile -> Enroll -> Subject -> DN configuration enroll: subject: dn: CN=[% CN.0 %],OU=[% OU.0 %],O=[% O.0 %] Rendered subject: CN=User Name Testing,OU=Somegroup,O=Company,s.r.o.=s.r.o. This is not a desired result. I want the "O=Company, s.r.o" I guess I need to do some kind of "escaping" somewhere. Any ideas what should I do to fix this? S přátelským pozdravem, [Logicworks]<https://logicworks.cz/> Michal Moravec Apple system administrator Logicworks, s.r.o.<https://logicworks.cz/> Argentinská 1621/36, Praha 7<https://www.google.cz/maps/place/Etnetera+Logicworks,+s.r.o./@50.1078991,14.4517256,17z/data=!3m1!4b1!4m5!3m4!1s0x470b94b2b61cb52d:0x6c88178df7f3ff49!8m2!3d50.1078957!4d14.4539143> www.logicworks.cz<https://logicworks.cz/> | 778745013<tel:778745013> _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net<mailto:OpenXPKI-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin! _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net<mailto:OpenXPKI-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/openxpki-users
_______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users