Yes, and Thank You both for doing so! While we're at it, I am reminded of another one we've found - not terribly important, but worth a look:
In using this option: '-enddate 140615235959Z' when signing a CSR, the cert is created correctly, expiring in 2014. However, the user prompt indicates it expires in '365 days' - in fact, I've never seen it prompt with any number larger than 365 days! Not a huge problem, but... Lou Picciano ----- Original Message ----- From: "Erwann Abalea" <erwann.aba...@keynectis.com> To: openssl-users@openssl.org Cc: "Jakob Bohm" <jb-open...@wisemo.com> Sent: Friday, December 16, 2011 1:04:49 PM Subject: Re: [openssl-users] Re: stateOrProvinceName field problem when signing CSR Le 16/12/2011 18:27, Jakob Bohm a écrit : > On 12/16/2011 6:14 PM, Erwann Abalea wrote: >> Le 16/12/2011 17:57, Mick a écrit : >>> On Friday 16 Dec 2011 16:23:52 you wrote: >>>> man req >>>> Then look for the "-utf8" argument. >>>> >>>> I took your example below, added "-utf8" argument, and it worked. >>>> You can display the content with "openssl req -text -noout -in >>>> blabla.pem -nameopt multiline,utf8,-esc_msb" >>> Would using -utf8 resolve the original OP problem? >> >> To create the request/certificate, yes. >> This is what I do to embed accented characters in UTF8. >> >> Typing >> >> openssl req -utf8 -new -nodes -newkey rsa:512 -keyout THORSTROM.key >> -out THORSTROM.csr -subj "/O=ESBJÖRN.com/OU=Esbjörn-Thörstrom >> Group/CN=Áki Thörstrom" >> >> on an UTF8 capable terminal, with a "string_mask = utf8only" in the >> right openssl.cnf file, gives me a certificate request correctly >> encoded in UTF8 with the wanted characters in the DN. > Sorry, but OP's problem seems to be that the CSR was created by "some > software embedded in a router", Sorry, I replied to the problem described by Lou Picciano, and forgot that Mick was the OP. My fault. -- Erwann ABALEA ----- Le netétiquette n'est qu'une vaste fumisterie,il faut de l'argent pour fonctionner,à force,en France de refuser tout rapport sain avec l'argent,l'on riqsque de tuer ce nouvel outil. -+- AA in: Guide du Neuneu d'Usenet - Le netétiquette du riche -+- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
