On Mon, Jan 16, 2006, Stef Hoeben wrote: > > We want to make pkcs10 request with "openssl -req", in which > the CN contains non-ASCII chars (greek, arab, chinese, ...) > > Is there a way to do so with the openssl tool? > E.g. by using escape characters, or by specifying the CN in openssl.conf > in some way, or tell the openssl tool to get the DN/CN from file? >
Yes, you need to specify the strings in UTF8 format. There may be an option to set the terminal to encode in UTF8 in which case the normal prompting may work. Otherwise try entering the data in a config file: see the 'req' manual page for examples. If you aren't using the latest versions of OpenSSL you may want to specify the "string_mask" option as "utf8only" to ensure it only use UTF8String for DirectoryString. To display the request properly you'll probably also need to specify the "nameopt" command line switch. This hasn't been extensively tested to let me know of any problems. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
