The syntax-element /String= is used for concatenating fields, as you would see in [EMAIL PROTECTED] or DirName:/C=AT/ST=Wien/L=....., when you use "openssl x509 -in myCert.pem -noout -text"
The problem for you could be, that C stands for _C_ountry and will be used in another place in the certificate and N, D and R are not defined as fields. Maybe (someone like steve henson could verify) it would be needed to add these identifiers as extensions to allow this syntax with D and N and R. ... I don't know, just trying to find hints ... best regards, Michael Am 2002-11-06 13:16 Uhr schrieb "CALinux" unter <[EMAIL PROTECTED]>: > > >> One more thing: >> As I understand it, you could use additional optional fields to be defined >> in openssl.cnf: >> G and S for _G_iven Name and _S_urname. >> >> In my opinion it is a good idea to create the CN automatically as a > ³>serial-number² for >> uniqueness of client certs and handle the user information via LDAP. > > Hi thanks for help, > our problem is that in Italian Public Adminitsration is mandatory the object > Description in Certificates. > It must be like this: > > Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>] > > Example > Description=C=Werzowa/N=Karl-Michael/D=01-01-1980 > > When we use only single character "/" or "=" it's OK > > Example description=C=Werzowa OK > > But when we use them together > > Example description=C=Werzowa/N=Karl-Micheal NOT OK > > and we obtain in the certificate > > description=C=Werzowa/, N=Karl-Micheal > > > CALinux Staff. > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- ************************************************************************ Karl-Michael Werzowa A-1190 Wien, Paradisgasse 28/4/6 +43 (664)302 4511, fax +43 (1)328 1992 14 [EMAIL PROTECTED], [EMAIL PROTECTED] ************************************************************************ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
