search

ModioAB / caramel

Caramel is a CA Registry Manager
GNU Affero General Public License v3.0
16 stars 5 forks source link

OS X forbids UTF8 encoding in commandline `openssl` #38

Closed Spindel closed 8 years ago

Spindel commented 9 years ago

The default openssl.cnf files in OS X (Up to and including El Capitan) explicitly forbids the generation of utf8 strings into certificates.

This overrides the -utf8 command line flag. The fix will be to generate our own openssl.cnf and use this.

Spindel commented 9 years ago

can @niligulmohar please check?

TODO: Maybe we should call openssl asn1parse -in csr.file and see if it contains any T61STRING and then flag it as broken?

Spindel commented 8 years ago

Merged into caramel-client / Master