> I am using your software to try and get a certificate for IE.
> However when I sign it I am getting a message saying
> 'emailAddress type needs to be of type IA5STRING'
Holger and I separately patched the ca program to handle UNIVERSALSTRING,
which is the 32-bit char type that MS uses if you add an @ char to a field.
Holger also had a command-line flag "-msie_hack" which found its way into
0.8.0, so you have to add that flag (or in the config file) to enable the
patch (my code detected and fixed the problem transparently).
> I have read a paper by Holger Reif where he says that SSLeay 0.8.0
> converts the ASN.1 character encodings, but the Latin-1 (western)
> charset should be used.
The patch strips the 32 bits down to 8, which would break Asian character sets.
My version of the patch insists that the discarded bytes are zero, so didn't
have this problem.
--
Clifford Heath http://www.osa.com.au/~cjh
Open Software Associates Limited mailto:[EMAIL PROTECTED]
29 Ringwood Street / PO Box 4414 Phone +613 9871 1694
Ringwood VIC 3134 AUSTRALIA Fax +613 9871 1711
------------------------------------------------------------
Deploy Applications across the net, see http://www.osa.com
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+
