Hi,
I was under the impression that OpenSSL was multibyte aware? Can someone
please confirm this?
If this is the case then I can't work out why the attached certificate
should be failing in the SSL_accept? The cert contains Japanese chars
(UTF8) in the DN. I loaded it into IE3 (the appropiate CA cert is also
attached) and hit the server.
SSL_accepts fails sometime very soon after the call indicated by ****'s below.
../openssl-0.9.4/crypto/asn1/x_cinf.c:126
M_ASN1_D2I_get(ret->serialNumber,d2i_ASN1_INTEGER);
M_ASN1_D2I_get(ret->signature,d2i_X509_ALGOR);
M_ASN1_D2I_get(ret->issuer,d2i_X509_NAME);
M_ASN1_D2I_get(ret->validity,d2i_X509_VAL);
*******M_ASN1_D2I_get(ret->subject,d2i_X509_NAME); ************
M_ASN1_D2I_get(ret->key,d2i_X509_PUBKEY);
It looks suspiciously like this code is not handling the wide characters???
Any help would be greatly appreciated!! The stack trace is below:
Regards,
Jimmy
=>[1] d2i_X509_NAME(a = 0x2be81c, pp = 0xedef0a1c, length = 277), line 202
in "x
_name.c"
[2] d2i_X509_CINF(a = 0x32f280, pp = 0xedef0ab8, length = 579), line 126
in "x
_cinf.c"
[3] d2i_X509(a = (nil), pp = 0xedef0b54, length = 583), line 99 in
"x_x509.c"
[4] ssl3_get_client_certificate(s = 0x368d48), line 1578 in "s3_srvr.c"
[5] ssl3_accept(s = 0x368d48), line 336 in "s3_srvr.c"
[6] SSL_accept(s = 0x368d48), line 603 in "ssl_lib.c"
[7] ssl23_get_client_hello(s = 0x368d48), line 498 in "s23_srvr.c"
[8] ssl23_accept(s = 0x368d48), line 159 in "s23_srvr.c"
[9] SSL_accept(s = 0x368d48), line 603 in "ssl_lib.c"
IECert.pfx
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
----------------------------------------------------------
James Darwin http://www.dascom.com
Senior Software Engineer DASCOM Australia Pty Ltd.
[EMAIL PROTECTED] Bond University Australia.
----------------------------------------------------------