[gnutls-dev] non-ASCII ASN.1 string types

[Joe Orton]

On Tue, Oct 12, 2004 at 10:07:53PM +0200, Nikos Mavrogiannopoulos wrote:
> On Thursday 07 October 2004 23:04, Joe Orton wrote:
> 
> > For a certificate with the OU encoded as a BMPString, the function
> > appears to simply give back the raw UCS-2 data, likewise a T61String OU
> > is given back as-is.
> Could you provide me with a certificate of this kind?
> Most probably the behaviour of gnutls would be to reject those certificates
> for now.

Attached certificates t61subj.cert and bmpsubj.cert in PEM format. You
can generate these using OpenSSL; the tests scripts I use in neon are:

http://svn.webdav.org/repos/projects/neon/trunk/test/makekeys.sh
http://svn.webdav.org/repos/projects/neon/trunk/test/openssl.conf

Regards,

joe
-------------- next part --------------
-----BEGIN CERTIFICATE-----
MIICVzCCAgGgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBqjELMAkGA1UEBhMCR0Ix
FzAVBgNVBAgTDkNhbWJyaWRnZXNoaXJlMRIwEAYDVQQHEwlDYW1icmlkZ2UxGTAX
BgNVBAoTEE5lb24gSGFja2VycyBMdGQxHzAdBgNVBAseFgBIAOgAbABsAG8AIABX
AG8AcgBsAGQxEjAQBgNVBAMTCWxvY2FsaG9zdDEeMBwGCSqGSIb3DQEJARYPbmVv
bkB3ZWJkYXYub3JnMB4XDTA0MTAxMTE5NDYzNVoXDTA3MDMzMDE5NDYzNVowgaox
CzAJBgNVBAYTAkdCMRcwFQYDVQQIEw5DYW1icmlkZ2VzaGlyZTESMBAGA1UEBxMJ
Q2FtYnJpZGdlMRkwFwYDVQQKExBOZW9uIEhhY2tlcnMgTHRkMR8wHQYDVQQLHhYA
SADoAGwAbABvACAAVwBvAHIAbABkMRIwEAYDVQQDEwlsb2NhbGhvc3QxHjAcBgkq
hkiG9w0BCQEWD25lb25Ad2ViZGF2Lm9yZzBcMA0GCSqGSIb3DQEBAQUAA0sAMEgC
QQDzRU5sZ8+CWQPvPkqJw9KloEgT2FqzZR9RT/qbJuRBmRphiRr0g7JOh5Mr7LXa
KShedFLhGidutyKKwIZJnRhtAgMBAAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZI
hvcNAQEEBQADQQCaumgmqYb9CbipMffiOv9CHRX9VWk/2tnkZ9XgwZnyfnep/iBC
QBfAxamdAAynLQxJXnmDLXTPZq3GRssFBxN8
-----END CERTIFICATE-----
-------------- next part --------------
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----