Possible DN encoding mismatch

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

GNU General Public License v2.0

346 stars 133 forks source link

This issue was migrated from Pagure Issue #340. Originally filed by edewata (@edewata) on 2012-09-25 22:36:00:

Assigned to vakwetu (@vakwetu)

There are different ways to encode a DN into string:

RFC 4514 (http://www.ietf.org/rfc/rfc4514.txt)
RFC 1779 (http://www.ietf.org/rfc/rfc1779.txt)

The DS uses RFC 4514, but according to the comments in the code the PKI uses RFC 1779.

These encodings seem to be compatible in most cases, or the PKI code has been adapted to work with the DS, so currently there seems to be no problem. However, the PKI code needs to be examined and possibly modified to fully conform to RFC 4514.

dogtagpki / pki

Possible DN encoding mismatch #911