> What characters are valid in a CN (common name, and is a CN most/less/the
> same restrictions as a DN?), obviously alphnum and some punctuation,
> but which ones? Anyone have a pointer to where this is specified?
A DN, Distinguished Name, is the set of attribute/value assertions, of
which CN can be one component. In a DN, the attribute is officially
known by its OID; the name is a user-friendly convenience that has no
real standing. :)
In the common case, folks are interested in LDAP, which is limited to
ASCII, basically.
If you are not limited to LDAP, then you typically have to look at the
ISO specs that define the particular OID. Most of the useful ones can
be found in the X.509 spec, I believe. Host Kesterson makes drafts of
"the next" spec available, and has posted here about them -- if you
search the mail archives you should be able to find the FTP info.
/r$
--
Zolera Systems, http://www.zolera.com
Information Integrity, XML Security
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]