The syntax-element /String= is used for concatenating fields, as you would
see in 
[EMAIL PROTECTED]
or
DirName:/C=AT/ST=Wien/L=.....,
when you use "openssl x509 -in myCert.pem -noout -text"

The problem for you could be, that C stands for _C_ountry and will be used
in another place in the certificate and N, D and R are not defined as
fields.

Maybe (someone like steve henson could verify) it would be needed to add
these identifiers as extensions to allow this syntax with D and N and R.

... I don't know, just trying to find hints ...

best regards,
Michael


Am 2002-11-06 13:16 Uhr schrieb "CALinux" unter <[EMAIL PROTECTED]>:

> 
> 
>> One more thing:
>> As I understand it, you could use additional optional fields to be defined
>> in openssl.cnf:
>> G and S for _G_iven Name and _S_urname.
>> 
>> In my opinion it is a good idea to create the CN automatically as a
> ³>serial-number² for
>> uniqueness of client certs and handle the user information via LDAP.
> 
> Hi thanks for help,
> our problem is that in Italian Public Adminitsration is mandatory the object
> Description in Certificates.
> It must be like this:
> 
>   Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>]
> 
> Example
>   Description=C=Werzowa/N=Karl-Michael/D=01-01-1980
> 
> When we use only single character "/" or "=" it's OK
> 
> Example    description=C=Werzowa     OK
> 
> But when we use them together
> 
> Example    description=C=Werzowa/N=Karl-Micheal     NOT OK
> 
> and we obtain in the certificate
> 
> description=C=Werzowa/, N=Karl-Micheal
> 
> 
> CALinux Staff.
> 
> 
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

-- 
************************************************************************
Karl-Michael Werzowa
A-1190 Wien, Paradisgasse 28/4/6
+43 (664)302 4511,  fax +43 (1)328 1992 14
[EMAIL PROTECTED], [EMAIL PROTECTED]
************************************************************************

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to