On 02-03-25 12:11:02 CET, Robert Joop wrote: > using openssl, i just produced a certificate with all three characters > in it. > > Subject: C=IT, CN=D'Angelo`'\xB4Riccardo > > while doing this, openssl printed > > commonName :T61STRING:'D'Angelo`'\0xFFFFFFB4Riccardo' > > is T.61 compatible with ISO 8859-1...?
btw, looking at RFC 1345, the answer seems to be 'no', and the \xB4 in T.61 seems to be a � (multiplication sign). even worse: <quote src="http://www.openssl.org/docs/apps/req.html";> BUGS OpenSSL's handling of T61Strings (aka TeletexStrings) is broken: it effectively treats them as ISO-8859-1 (Latin 1), Netscape and MSIE have similar behaviour. This can cause problems if you need characters that aren't available in PrintableStrings and you don't want to or can't use BMPStrings. As a consequence of the T61String handling the only correct way to represent accented characters in OpenSSL is to use a BMPString: unfortunately Netscape currently chokes on these. If you have to use accented characters with Netscape and MSIE then you currently need to use the invalid T61String form. </quote> rj _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
