>One more thing:
>As I understand it, you could use additional optional fields to be defined
>in openssl.cnf:
>G and S for _G_iven Name and _S_urname.
>
>In my opinion it is a good idea to create the CN automatically as a
³>serial-number² for
>uniqueness of client certs and handle the user information via LDAP.

Hi thanks for help,
our problem is that in Italian Public Adminitsration is mandatory the object
Description in Certificates.
It must be like this:

    Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>]

Example
    Description=C=Werzowa/N=Karl-Michael/D=01-01-1980

When we use only single character "/" or "=" it's OK

Example    description=C=Werzowa     OK

But when we use them together

Example    description=C=Werzowa/N=Karl-Micheal     NOT OK

and we obtain in the certificate

 description=C=Werzowa/, N=Karl-Micheal


CALinux Staff.



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to