Hi Steve, > -----Original Message----- > From: Dr. Stephen Henson > > On Wed, Aug 11, 2010, Eisenacher, Patrick wrote: > > > Hi, > > > > I can make openssl's ca tool issue certificates with the > subject's dname encoded as UTF8String for requests with UTF-8 > encoded subject dnames. However, when I change the subject > via the -subj commandline option, I can't seem to get a > certificate with a UTF-8 encoded subject dname. > > > > Here's what I see: > > -subj is ascii string, no -utf8 commandline option -> > PrintableString > > -subj is ascii string, -utf8 commandline option -> PrintableString > > -subj contains umlaut, no -utf8 commandline option -> TeletexString > > -subj contains umlaut, -utf8 commandline option -> TeletexString > > > > This is with openssl v1.0.0-beta3 15 Juli 2009. > > > > > > How can I make the ca tool encode the subject name given > via the commandline as UTF8String? > > > > Try adding a string_mask in the CA_default section of > openssl.cnf and set it > to utf8only.
thank you so much, this works like a charm. Can you please add this to the documentation? And while we're at it, can you please also add the utf8 option to the documented list of configuration file options? They are both only documented for the req command. Patrick Eisenacher ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
