> What characters are valid in a CN (common name, and is a CN most/less/the

 > same restrictions as a DN?), obviously alphnum and some punctuation,
 > but which ones? Anyone have a pointer to where this is specified?

A DN, Distinguished Name, is the set of attribute/value assertions, of 
which CN can be one component.  In a DN, the attribute is officially 
known by its OID; the name is a user-friendly convenience that has no 
real standing. :)

In the common case, folks are interested in LDAP, which is limited to 
ASCII, basically.

If you are not limited to LDAP, then you typically have to look at the 
ISO specs that define the particular OID.  Most of the useful ones can 
be found in the X.509 spec, I believe.  Host Kesterson makes drafts of 
"the next" spec available, and has posted here about them -- if you 
search the mail archives you should be able to find the FTP info.
        /r$


-- 
Zolera Systems, http://www.zolera.com
Information Integrity, XML Security

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to