[issue52] gpgsm reverses order of DN attributes in cert request

[Bernhard Herzog]

New submission from Bernhard Herzog <bh at intevation.de>:

gpgsm reverses the order of the DN attributes when generating a certificate
request.  I generated a request with the certmanager (aegypten_branch
2004-01-27) and a customized order of attributes (non-ascii chars may have been
mangled in some way):

<GnupgKeyParms format="internal">
Key-Type: RSA
Key-Length: 1024
Key-Usage: Sign, Encrypt
name-dn: C=DE,CN=%/1€Œiso8859-15Ägypten Testbenutzer 9,L=Osnabr%/1€Œiso8859-15ück,OU=Test 2004-01-27,O=Intevation GmbH
name-email: aegyptentest9 at intevation.de
</GnupgKeyParms>


The cert request contains the attributes in exactly the opposite order:

   0   48: SEQUENCE {
   4   48:   SEQUENCE {
   8    2:     INTEGER 0
  11   48:     SEQUENCE {
  13   49:       SET {
  15   48:         SEQUENCE {
  17    6:           OBJECT IDENTIFIER '2 5 4 10'
  22   19:           PrintableString 'Intevation GmbH'
         :           }
         :         }
  39   49:       SET {
  41   48:         SEQUENCE {
  43    6:           OBJECT IDENTIFIER '2 5 4 11'
  48   19:           PrintableString 'Test 2004-01-27'
         :           }
         :         }
  65   49:       SET {
  67   48:         SEQUENCE {
  69    6:           OBJECT IDENTIFIER '2 5 4 7'
  74   12:           UTF8String 'Osnabr..ck'
         :           }
         :         }
  86   49:       SET {
  88   48:         SEQUENCE {
  90    6:           OBJECT IDENTIFIER '2 5 4 3'
  95   12:           UTF8String '..gypten Testbenutzer 9'
         :           }
         :         }
 120   49:       SET {
 122   48:         SEQUENCE {
 124    6:           OBJECT IDENTIFIER '2 5 4 6'
 129   19:           PrintableString 'DE'
         :           }
         :         }
         :       }

----------
assignedto: werner
messages: 185
nosy: bh, werner
priority: critical
status: unread
title: gpgsm reverses order of DN attributes in cert request
topic: gpgsm
______________________________________________________
Aegypten issue tracker <aegypten-issues at intevation.de>
<https://intevation.de/roundup/aegypten/issue52>
______________________________________________________