Giter VIP home page Giter VIP logo

Comments (3)

kinichiro avatar kinichiro commented on June 2, 2024 1

X509_NAME_print() in crypto/asn1/t_x509.c appears to cause this issue.
It can handle upper cased 1 byte or 2bytes subject string only.
And man page says

The functions X509_NAME_oneline() and X509_NAME_print() are legacy
functions which produce a non-standard output form.  They don't handle
multi-character fields and have various quirks and inconsistencies.
Their use is strongly discouraged in new applications.

from openbsd.

kinichiro avatar kinichiro commented on June 2, 2024

I tried to see this issue.
At first, I generated private key and CSR by these commands.

$ openssl genpkey -algorithm RSA -out my.key
$ openssl req -new -key my.key -out my.csr \
    -subj "/C=UK/L=London/O=Org/OU=Unit/CN=my.domain/[email protected]"

I checked subject of generated CSR by this commad,
and I confirmed emailAddress was merged into CN value.

$ openssl req -in my.csr -text -noout
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: C=UK, L=London, O=Org, OU=Unit, CN=my.domain/[email protected]
...

I also tried to parse CSR by perspective of ASN1 by this command,
and I found emailAddress was successfully separated from CN.

$ openssl asn1parse -in my.csr -inform PEM -dump
    0:d=0  hl=4 l= 689 cons: SEQUENCE
    4:d=1  hl=4 l= 409 cons: SEQUENCE
    8:d=2  hl=2 l=   1 prim: INTEGER           :00
   11:d=2  hl=2 l= 108 cons: SEQUENCE
   13:d=3  hl=2 l=  11 cons: SET
   15:d=4  hl=2 l=   9 cons: SEQUENCE
   17:d=5  hl=2 l=   3 prim: OBJECT            :countryName
   22:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :UK
   26:d=3  hl=2 l=  15 cons: SET
   28:d=4  hl=2 l=  13 cons: SEQUENCE
   30:d=5  hl=2 l=   3 prim: OBJECT            :localityName
   35:d=5  hl=2 l=   6 prim: UTF8STRING        :London
   43:d=3  hl=2 l=  12 cons: SET
   45:d=4  hl=2 l=  10 cons: SEQUENCE
   47:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
   52:d=5  hl=2 l=   3 prim: UTF8STRING        :Org
   57:d=3  hl=2 l=  13 cons: SET
   59:d=4  hl=2 l=  11 cons: SEQUENCE
   61:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
   66:d=5  hl=2 l=   4 prim: UTF8STRING        :Unit
   72:d=3  hl=2 l=  18 cons: SET
   74:d=4  hl=2 l=  16 cons: SEQUENCE
   76:d=5  hl=2 l=   3 prim: OBJECT            :commonName
   81:d=5  hl=2 l=   9 prim: UTF8STRING        :my.domain
   92:d=3  hl=2 l=  27 cons: SET
   94:d=4  hl=2 l=  25 cons: SEQUENCE
   96:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  107:d=5  hl=2 l=  12 prim: IA5STRING         :[email protected]
  121:d=2  hl=4 l= 290 cons: SEQUENCE
  125:d=3  hl=2 l=  13 cons: SEQUENCE
  127:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
  138:d=4  hl=2 l=   0 prim: NULL
  140:d=3  hl=4 l= 271 prim: BIT STRING
...

I could not get an answer yet, though, this issue might just a subject display probrem.

from openbsd.

kinichiro avatar kinichiro commented on June 2, 2024

@Gisleburt Can you close this issue ?

from openbsd.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.