On 02-03-27 11:15:51 CET, Gerd Schering wrote: > Hi, > > I have the following problem: > I want to sign a request which contains as CN a string like > CN=SomeTest@SomeTeam@[EMAIL PROTECTED] > > > When trying to sign the csr, i get: > > Check that the request matches the signature > Signature ok > The Subjects Distinguished Name is as follows > [...] > commonName :PRINTABLE:' > The string contains characters that are illegal for the ASN.1 type > unable to load certificate > > > The csr was NOT generated with openssl. > When I generate a csr with openssl containing a CN like > CN=gerd@home@berlin@tu > no problem when signing it: > > [...] > commonName :T61STRING:'gerd@home@berlin@tu' > Certificate is to be certified until Mar 27 09:42:31 2003 GMT (365 days) > Sign the certificate? [y/n]:y > > But now the string is recognized not as PRINTABLE but as T61STRING.
PrintableString and TeletexString (T61String) are ASN.1 types. PrintableString does *not* contain the @ character, whereas T.61 does. rj ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]