On 02-03-27 11:15:51 CET, Gerd Schering wrote:
> Hi,
> 
> I have the following problem:
> I want to sign a request which contains as CN a string like
> CN=SomeTest@SomeTeam@[EMAIL PROTECTED]
> 
> 
> When trying to sign the csr, i get:
> 
> Check that the request matches the signature
> Signature ok
> The Subjects Distinguished Name is as follows
> [...]
> commonName            :PRINTABLE:'
> The string contains characters that are illegal for the ASN.1 type
> unable to load certificate
> 
> 
> The csr was NOT generated with openssl.
> When I generate a csr with openssl containing a CN like
> CN=gerd@home@berlin@tu
> no problem when signing it:
> 
> [...]
> commonName            :T61STRING:'gerd@home@berlin@tu'
> Certificate is to be certified until Mar 27 09:42:31 2003 GMT (365 days)
> Sign the certificate? [y/n]:y
> 
> But now the string is recognized not as PRINTABLE but as T61STRING.

PrintableString and TeletexString (T61String) are ASN.1 types.
PrintableString does *not* contain the @ character, whereas T.61 does.

rj
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to