Re: [Openca-Users] Description Object.

[Michael B. <mic...@rz...>]

CALinux wrote:
> Hi,
>   in Italian Public Adminitsration is mandatory the object Description in Certificates.
> It must be like this:
>          Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>]

Is this the DN (the subject) of the certificate? Is this only the prefix 
of the DN or is this the whole DN?

Max, can you give any comments to this problem?

Generally you can create every DN which you want with OpenCA. Only the 
LDAP-integration is a problem if there are some new attributes. The 
problem is that the attributes which you are used are completely unknown 
or wrong.

If we should add some code to support such secial DNs then we need the 
OIDs of the attributes (perhaps take a look at 
http://www.alvestrand.no/objectid/) or the correct names of the 
attributes (check the schemas of OpenLDAP).

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): mic...@we...
Rechenzentrum - Datacenter     Email:  mic...@rz...
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org