RE: [openssl.org #3557] -nameopt utf8 behaviour in openssl 1.0.1i

[Salz, Rich]

Look like a bug and a reasonable fix.  Thanks.

--
Principal Security Engineer, Akamai Technologies
IM: rs...@jabber.me Twitter: RichSalz

From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On 
Behalf Of Dmitry Belyavsky
Sent: Saturday, October 11, 2014 12:19 PM
To: openssl-dev@openssl.org
Subject: Re: [openssl.org #3557] -nameopt utf8 behaviour in openssl 1.0.1i

Hello Openssl team,

Any comments?

Thank you!

On Mon, Oct 6, 2014 at 12:07 AM, Dmitry Belyavsky via RT 
mailto:r...@openssl.org>> wrote:
Hello OpenSSL Team,

The x509 and req commands behave strangely when the nameopt utf8 is
specified.

beldmit@manul$ openssl x509 -text -noout -nameopt utf8 -in
./demos/cms/cacert.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14395258657826892692 (0xc7c63b7adda36b94)
Signature Algorithm: md5WithRSAEncryption
Issuer:

The output becomes correct when we specify -nameopt sep_comma_plus,utf8

The patch by Victor Wagner fixing this behaviour is attached.

Thank you!

--
SY, Dmitry Belyavsky

--- ../openssl-1.0.1i/crypto/asn1/a_strex.c 2014-07-22 23:41:23.0 
+0400
+++ crypto/asn1/a_strex.c   2014-10-05 19:45:32.790011154 +0400
@@ -414,6 +414,7 @@
sep_mv_len = 3;
break;

+   case 0:
case XN_FLAG_SEP_COMMA_PLUS:
sep_dn = ",";
sep_dn_len = 1;



--
SY, Dmitry Belyavsky

Re: [openssl.org #3557] -nameopt utf8 behaviour in openssl 1.0.1i

[Dmitry Belyavsky]

Hello Openssl team,

Any comments?

Thank you!

On Mon, Oct 6, 2014 at 12:07 AM, Dmitry Belyavsky via RT 
wrote:

> Hello OpenSSL Team,
>
> The x509 and req commands behave strangely when the nameopt utf8 is
> specified.
>
> beldmit@manul$ openssl x509 -text -noout -nameopt utf8 -in
> ./demos/cms/cacert.pem
> Certificate:
> Data:
> Version: 3 (0x2)
> Serial Number: 14395258657826892692 (0xc7c63b7adda36b94)
> Signature Algorithm: md5WithRSAEncryption
> Issuer:
>
> The output becomes correct when we specify -nameopt sep_comma_plus,utf8
>
> The patch by Victor Wagner fixing this behaviour is attached.
>
> Thank you!
>
> --
> SY, Dmitry Belyavsky
>
>
> --- ../openssl-1.0.1i/crypto/asn1/a_strex.c 2014-07-22
> 23:41:23.0 +0400
> +++ crypto/asn1/a_strex.c   2014-10-05 19:45:32.790011154 +0400
> @@ -414,6 +414,7 @@
> sep_mv_len = 3;
> break;
>
> +   case 0:
> case XN_FLAG_SEP_COMMA_PLUS:
> sep_dn = ",";
> sep_dn_len = 1;
>
>


-- 
SY, Dmitry Belyavsky

configure failure

[dcruette]

Hi

On the current branch openssl-SNAP-20141011

perl ./Configure mingw -E -no-asm

failure on :

md4.h => ../../include/openssl/md4.h

md4test.c => ../../test/md4test.c
Can't open md4.c: No such file or directory at ../../util/mklink.pl line 
62.


Didier
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org