PKCS10 cert request generation fails when subjectAltName that accepts email has i18n chars

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

GNU General Public License v2.0

359 stars 134 forks source link

This issue was migrated from Pagure Issue #931. Originally filed by rpattath (@rpattath) on 2014-03-25 21:45:58:

Closed as Duplicate
Assigned to nobody

The following is the output for caUserCert request generation

[root@sigma dogtag]# PKCS10Client -p redhat123 -d /opt/rhqa_pki/certs_db/ -a rsa -l 2048 -o /opt/rhqa_pki/certs_db/cert-request-1002.pem -n "UID=Örjan Äke,E=ÖrjanÄke@example.com,CN=Örjan Äke,OU=redhat,O=redhat,C=US" PKCS10Client: Debug: got token. PKCS10Client: Debug: thread token set. PKCS10Client: token Internal Key Storage Token logged in... PKCS10Client: key pair generated. PKCS10Client: Exception caught: java.lang.IllegalArgumentException: Invalid IA5String AVA Value string

dogtagpki / pki

PKCS10 cert request generation fails when subjectAltName that accepts email has i18n chars #1497