On 5/7/2014 10:06 PM, Jan Just Keijser wrote:
> Hi Andris,
>
> On 08/05/14 03:32, Andris Kalnozols wrote:
>> The X.509 user certificates in our organization have Subject fields
>> that appear as in the following example:
>>
>>Subject: O=Hewlett-Packard Company, OU=WEB,
>>CN=GivenName
On 5/8/2014 4:17 AM, Jan Just Keijser wrote:
> Hi Andris,
>
> I would consider this a bug, as you are indeed not able to specify
> something like 'emailAddress' as a x509-username parameter.
> Personally I would like to remove the 'toupper' line altogether, but
> from a usability point of view
Thanks, Steffan, for the comments and code cleanup. Your method
is definitely safer and has less clutter. I tested your version
and it works as intended.
Regarding the "ext:" argument prefix, I had submitted an enhanced
version of extract_x509_extension() mainly for more helpful log
messages.
