Re: [OpenXPKI-users] Special characters in subject
Hi Andreas, Am 07.01.20 um 16:16 schrieb andreas.krie...@o-s.de: > Hello and happy new year same to you ;) > Sorry for opening this old case but i saw that something changed by upgrading > to 2.5.5. Still on 2.5? We are on 3.2 already ;) > The parts where I have changed the regex is gone. I have tried to add the > matching inside the profiles but I still get an 'Subject is invalid' from the > workflow. This message comes from OpenXPKI::Server::Workflow::Condition::SubjectValid which uses OpenXPKI::DN to split the string into components - I did not check this but my guesstimate is that this horribly fails and interprets the MS/2 as RDN :( Option 1) Fix the parser in OpenXPKI::DN Option 2) Remove the subject check in the workflow - but I don't give any gurantee that this wont bite you in another place later as AFAIR we use OpenXPKI::DN to split the DN later again. Oliver -- Protect your environment - close windows and adopt a penguin! smime.p7s Description: S/MIME Cryptographic Signature ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] Special characters in subject
Hello and happy new year Sorry for opening this old case but i saw that something changed by upgrading to 2.5.5. The parts where I have changed the regex is gone. I have tried to add the matching inside the profiles but I still get an 'Subject is invalid' from the workflow. The OU part should be something like OU=MS/2 and is recognized as OU= I have added 'match: \A [a-zA-Z0-9\@\-_\.\&\/\s\%\*\+\=\,\:\ ]* \z' tot he ou template without any effect. The 'search_cert' part within OpenXPKI::Server::API looks different now Where do I have to change the regex now? Regards Andreas -Ursprüngliche Nachricht- Von: Oliver Welter Gesendet: Freitag, 25. August 2017 08:27 An: openxpki-users@lists.sourceforge.net Betreff: Re: [OpenXPKI-users] Special characters in subject Hi Andreas, this is not a "edit here" problem - if you want to try, have a look at the regex filters in OpenXPKI::Server::API for e.g. search_cert. It might work with just relaxing the regex. We have just started a rework of the API and will adress this problem, so perhaps it is an option for you to contribute to the overall development ;) Oliver Am 21.08.2017 um 11:31 schrieb andreas.krie...@o-s.de: > Hi Oliver. > > Can you tell which file I have to look for to get it to work please? > Maybe I can fix it by myself :) > > > Mit freundlichen Grüßen / Best regards > > Andreas Krieger > > > > Hi Andreas, > >> Are there any issues using special characters within the subject like >> in the fields O und OU > We have a slash in our OU and a & and . in >> our O. If I don't use them > it works just fine but when I use them those characters the creation of the > subject fails. > To be honest, we never took care on special chars in the subject parts as our > main customers did not demand for it. Besides the problem that openssl is a > bit picky on some things a lot of sanitization rules do not handle such chars > correctly internally - so it is just not working yet. > > Oliver > > > -- > Protect your environment - close windows and adopt a penguin! > > -- > Check out the vibrant tech community on one of the world's > most engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > OpenXPKI-users mailing list > OpenXPKI-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > > -- > Check out the vibrant tech community on one of the world's > most engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > OpenXPKI-users mailing list > OpenXPKI-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin! ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] Special characters in subject
Hi Andreas, this is not a "edit here" problem - if you want to try, have a look at the regex filters in OpenXPKI::Server::API for e.g. search_cert. It might work with just relaxing the regex. We have just started a rework of the API and will adress this problem, so perhaps it is an option for you to contribute to the overall development ;) Oliver Am 21.08.2017 um 11:31 schrieb andreas.krie...@o-s.de: Hi Oliver. Can you tell which file I have to look for to get it to work please? Maybe I can fix it by myself :) Mit freundlichen Grüßen / Best regards Andreas Krieger Hi Andreas, Are there any issues using special characters within the subject like in the fields O und OU > We have a slash in our OU and a & and . in our O. If I don't use them it works just fine but when I use them those characters the creation of the subject fails. To be honest, we never took care on special chars in the subject parts as our main customers did not demand for it. Besides the problem that openssl is a bit picky on some things a lot of sanitization rules do not handle such chars correctly internally - so it is just not working yet. Oliver -- Protect your environment - close windows and adopt a penguin! -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin! smime.p7s Description: S/MIME Cryptographic Signature -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] Special characters in subject
Hi Andreas, Are there any issues using special characters within the subject like in the fields O und OU > We have a slash in our OU and a & and . in our O. If I don't use them it works just fine but when I use them those characters the creation of the subject fails. To be honest, we never took care on special chars in the subject parts as our main customers did not demand for it. Besides the problem that openssl is a bit picky on some things a lot of sanitization rules do not handle such chars correctly internally - so it is just not working yet. Oliver -- Protect your environment - close windows and adopt a penguin! -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
