Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-13 Thread Jason Haar
On Wed, Nov 13, 2002 at 09:35:47AM +0100, Karl-Michael Werzowa wrote: letters, etc. (If you use an Ö or Ä it may be easy, but what about hungarian, slovak, croatian characters? How to type these? Do you know the possible transcripts?) The best way seems to be to have an ascii transcript and

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-13 Thread Joern Sierwald
At 11:42 14.11.2002 +1300, you wrote: On Wed, Nov 13, 2002 at 09:35:47AM +0100, Karl-Michael Werzowa wrote: letters, etc. (If you use an Ö or Ä it may be easy, but what about hungarian, slovak, croatian characters? How to type these? Do you know the possible transcripts?) The best way seems

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Karl-Michael Werzowa
Hi, Jason! Some input, maybe it helps: To my understanding, UTF8 would encode Ö as \xc3\x96 and Ä as \xc3\x84 D6 is 214 is the position in ISO8859-1 of the Ouml (Ö). So, LDAP exported iso8859-1 (or so) I suppose, and not UTF8. (with Mozilla it could be that you use some non-iso translation)

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Joern Sierwald
At 16:51 12.11.2002 +1300, you wrote: Hi there I want to generate certs from our internal LDAP server. We have people from all over the world here, and so some of these entries have 8bit chars in their names (shock! horror!) Now I went off and generated a cert for one Frank Österberg (that's an

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Joern Sierwald
At 16:51 12.11.2002 +1300, you wrote: Now I went off and generated a cert for one Frank Österberg (that's an O with two dots on top), and when I vi the PEM afterwards I see \xD6sterberg. Run your PEM through openssl asn1parse -dump -in myfile.pem That will display the encoding. Post the

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Dr. Stephen Henson
On Tue, Nov 12, 2002, Jason Haar wrote: Hi there I want to generate certs from our internal LDAP server. We have people from all over the world here, and so some of these entries have 8bit chars in their names (shock! horror!) Now I went off and generated a cert for one Frank Österberg

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Jason Haar
On Tue, Nov 12, 2002 at 02:02:33PM +0100, Dr. Stephen Henson wrote: This is an alighty can of worms... If you want to use OpenSSL to generate these things you can mess around with the config files to accept input as UTF8 and you have to arrange the terminal to output UTF8 sequences, or

Re: How can I add 8-bit charset/unicode strings to certs?

2002-11-12 Thread Jason Haar
On Wed, Nov 13, 2002 at 09:20:51AM +1300, Jason Haar wrote: 1. find out what charset LDAP returns in 2. find a way to translate those strings into unicode 3. feed the result into OpenSSL with string_mask=utf8only Actually, it wasn't as hard as all that. Instead I set string_mask=pkix and

How can I add 8-bit charset/unicode strings to certs?

2002-11-11 Thread Jason Haar
Hi there I want to generate certs from our internal LDAP server. We have people from all over the world here, and so some of these entries have 8bit chars in their names (shock! horror!) Now I went off and generated a cert for one Frank Österberg (that's an O with two dots on top), and when I vi