Project

General

Profile

Bug #6432

Relative distinguished names should accept unicode during CA creation.

Added by Marcin Słaboński 11 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Certificates
Target version:
Start date:
06/01/2016
Due date:
% Done:

0%

Affected version:
2.3.1
Affected Architecture:
amd64

Description

Hi,

I found improper behavior during creation of CA.

Data that was used to create CA:
emailAddress=, ST=Malopołska, O=Idium Polska, L=Kraków, CN=Idium Polska Internal Certificate Authority, C=PL

After save configuration certificate didn't appeared in System -> Cert. Manager -> CAs, also none of the error code/info was returned (there was several attempts).
Problem was solved using ASCI letters in ST and L names, but both of that relative distinguished names should accept unicode characters.

System: Netgate SG-4860
Version: 2.3.1-RELEASE-p1 (amd64) built on Wed May 25 14:56:42 CDT 2016 FreeBSD 10.3-RELEASE-p3
CPU Type: Intel(R) Atom(TM) CPU C2558 @ 2.40GHz
Hardware crypto: AES-CBC,AES-XTS,AES-GCM,AES-ICM

Associated revisions

Revision 3b55b54e
Added by Sean McBride 6 months ago

Improved error message to explicitly state allowable characters

Related to Bug #6432.

Revision 9e2fa369
Added by Sean McBride 5 months ago

Improved error message to explicitly state allowable characters

Related to Bug #6432.

(cherry picked from commit 3b55b54e9c76998a2b0e28897a0be79d5cf0cb8f)

History

#1 Updated by Sean McBride 6 months ago

I hit this exact problem too.

It would be nice to at least improve the error message to state which characters are currently allowed. I'll take a stab at creating such a patch...

#2 Updated by Jim Pingle 3 months ago

  • Target version set to 2.3.3

#3 Updated by Renato Botelho 3 months ago

  • Status changed from New to Resolved

works

#4 Updated by Sean McBride 3 months ago

To be clear, what's the fix? Does it merely warn to use only ASCII, or does it now support Unicode properly?

#5 Updated by Marcel Hellwig 2 months ago

If you look at the associated revisions you'll see, that he only wants A-Z, a-z, space, underscore, and dash

That's not a solution for this problem!

#6 Updated by Jim Thompson about 2 months ago

  • Assignee set to Steve Beaver

Also available in: Atom PDF