Hi,

I was under the impression that OpenSSL was multibyte aware? Can someone
please confirm this?

If this is the case then I can't work out why the attached certificate
should be failing in the SSL_accept? The cert contains Japanese chars
(UTF8) in the DN. I loaded it into IE3 (the appropiate CA cert is also
attached) and hit the server.

SSL_accepts fails sometime very soon after the call indicated by ****'s below.
../openssl-0.9.4/crypto/asn1/x_cinf.c:126
        
        M_ASN1_D2I_get(ret->serialNumber,d2i_ASN1_INTEGER);
        M_ASN1_D2I_get(ret->signature,d2i_X509_ALGOR);
        M_ASN1_D2I_get(ret->issuer,d2i_X509_NAME);
        M_ASN1_D2I_get(ret->validity,d2i_X509_VAL);
 *******M_ASN1_D2I_get(ret->subject,d2i_X509_NAME);     ************
        M_ASN1_D2I_get(ret->key,d2i_X509_PUBKEY);

It looks suspiciously like this code is not handling the wide characters???
Any help would be greatly appreciated!! The stack trace is below:

Regards,

Jimmy

=>[1] d2i_X509_NAME(a = 0x2be81c, pp = 0xedef0a1c, length = 277), line 202
in "x
_name.c"
  [2] d2i_X509_CINF(a = 0x32f280, pp = 0xedef0ab8, length = 579), line 126
in "x
_cinf.c"
  [3] d2i_X509(a = (nil), pp = 0xedef0b54, length = 583), line 99 in
"x_x509.c"
  [4] ssl3_get_client_certificate(s = 0x368d48), line 1578 in "s3_srvr.c"
  [5] ssl3_accept(s = 0x368d48), line 336 in "s3_srvr.c"
  [6] SSL_accept(s = 0x368d48), line 603 in "ssl_lib.c"
  [7] ssl23_get_client_hello(s = 0x368d48), line 498 in "s23_srvr.c"
  [8] ssl23_accept(s = 0x368d48), line 159 in "s23_srvr.c"
  [9] SSL_accept(s = 0x368d48), line 603 in "ssl_lib.c"

IECert.pfx

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

----------------------------------------------------------
    James Darwin             http://www.dascom.com
 Senior Software Engineer    DASCOM Australia Pty Ltd.
   [EMAIL PROTECTED]          Bond University Australia.
----------------------------------------------------------

Reply via email to