[gnutls-dev] non-ASCII ASN.1 string types

Nikos Mavrogiannopoulos nmav at gnutls.org
Wed Oct 13 11:34:56 CEST 2004


On Wednesday 13 October 2004 00:00, Joe Orton wrote:
> On Tue, Oct 12, 2004 at 10:07:53PM +0200, Nikos Mavrogiannopoulos wrote:
> > On Thursday 07 October 2004 23:04, Joe Orton wrote:
> > > For a certificate with the OU encoded as a BMPString, the function
> > > appears to simply give back the raw UCS-2 data, likewise a T61String OU
> > > is given back as-is.
> > Could you provide me with a certificate of this kind?
> > Most probably the behaviour of gnutls would be to reject those
> > certificates for now.
> Attached certificates t61subj.cert and bmpsubj.cert in PEM format. You
> can generate these using OpenSSL; the tests scripts I use in neon are:
Ok. The newest patch will print something like:
Subject: C=GB,ST=Cambridgeshire,L=Cambridge,O=Neon Hackers 
Ltd,OU=#48e86c6c6f20576f726c64,CN=localhost,EMAIL=neon at webdav.org

for these certificates.

> Regards,
> joe

-- 
Nikos Mavrogiannopoulos




More information about the Gnutls-devel mailing list