openca-users

[Openca-Users] Problems about multi-bytes language contents

[wking <blu...@ho...>]

Hi, all,

   I'm using simplified Chinese as my mother language. There is two problems
hen I use a Chinese words as Subject Name.

   1. I submitted a CRR, the Chinese words become some strange words with no
meanings when I check it in RA. I've changed the Mysql's client and server's
default character to utf-8.

   2.I can edit the CRR, and repair the Chinese words to correct ones. but
when I issue the request in CA. A Error ocurred as bellow:
Error while issuing Certificate to 刘百祥 (filename:
/usr/local/var/openca/tmp/0D.req). 
OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert:
OpenSSL fails (7777067). Using configuration from
/usr/local/etc/openca/openssl/openssl/User.conf
Check that the SPKAC request matches the signature
Signature ok
ERROR: adding extensions in section default
3181:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too
large:a_object.c:108:
3181:error:0D064083:asn1 encoding routines:a2d_ASN1_OBJECT:invalid
separator:a_object.c:124:
3181:error:22075077:X509 V3 routines:v2i_GENERAL_NAME_ex:bad
object:v3_alt.c:468:value=04577
3181:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
extension:v3_conf.c:93:name=subjectAltName, value=@subject_alt_name
error in ca
).

   Who will give me some suggestion except not using Chinese ?
-- 
View this message in context: http://www.nabble.com/Problems-about-multi-bytes-language-contents-tp20717745p20717745.html
Sent from the openca-users mailing list archive at Nabble.com.

Re: [Openca-Users] Problems about multi-bytes language contents

[wking <blu...@ho...>]

I debuged these days.
Problem 2 is because of my editting on RID
But I still can't resolve Problem 1.

I put out all the data in DBI.pm which is being insert into database of
Public Interface and also update database of RA Inberface. The data output
is almost the same and seems all right. But when I select the data in MySQL
, the multibyte datas are diffrent. What was happened after the DBI's
commit? I've no idea. Is this a bug of DBI or OpenCA?
 

wking wrote:
> 
> Hi, all,
> 
>    I'm using simplified Chinese as my mother language. There is two
> problems hen I use a Chinese words as Subject Name.
> 
>    1. I submitted a CSR, the Chinese words become some strange words with
> no meanings when I check it in RA. I've changed the Mysql's client and
> server's default character to utf-8.
> 
>    2.I can edit the CSR, and repair the Chinese words to correct ones. but
> when I issue the request in CA. A Error ocurred as bellow:
> Error while issuing Certificate to 刘百祥 (filename:
> /usr/local/var/openca/tmp/0D.req). 
> OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert:
> OpenSSL fails (7777067). Using configuration from
> /usr/local/etc/openca/openssl/openssl/User.conf
> Check that the SPKAC request matches the signature
> Signature ok
> ERROR: adding extensions in section default
> 3181:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too
> large:a_object.c:108:
> 3181:error:0D064083:asn1 encoding routines:a2d_ASN1_OBJECT:invalid
> separator:a_object.c:124:
> 3181:error:22075077:X509 V3 routines:v2i_GENERAL_NAME_ex:bad
> object:v3_alt.c:468:value=04577
> 3181:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
> extension:v3_conf.c:93:name=subjectAltName, value=@subject_alt_name
> error in ca
> ).
> 
>    Who will give me some suggestion except not using Chinese ?
> 
> p.s. The CRR is like this:
> Variable Value 
> Request Version 1 
> Serial Number 3104 
> Common Name 刘百祥 
> E-Mail bx...@fu... 
> Subject Alternative Name ema...@fu...
> otherName.1=1.3.6.1.4.1.311.25.1;UTF8:04828 RID.2=04577  
> Role User 
> Lifetime (days) n/a 
> Not before (YYMMDDhhmmss) n/a 
> Not after (YYMMDDhhmmss) n/a 
> Lifetime check Lifetime would be ok. 
> LOA High 
> Distinguished Name serialNumber=206,CN=刘百祥, OU=Users, O=Fudan, C=CN 
> Submitted on Thu Nov 27 10:55:14 2008 UTC 
> 
> 

-- 
View this message in context: http://www.nabble.com/Problems-about-multi-bytes-language-contents-tp20717745p20805413.html
Sent from the openca-users mailing list archive at Nabble.com.

Re: [Openca-Users] Problems about multi-bytes language contents

[wking <blu...@ho...>]

Hi, all,

 After a week's day and night debug, I find out the cause at last. It's
caused by a mis-decoding of parameters which is going to persistent into
database from utf-8.

I modified the OpenCA/DBI.pm of perl module.

from Line 3085:

  # my @obind_values = @{$keys->{BIND_VALUES}} if ($keys->{BIND_VALUES});
  my @bind_values;

  foreach my $help ( @{$keys->{BIND_VALUES}}){
  # if the bind value is still in utf-8 , I decode it here. :)
        if(Encode::is_utf8($help)){
        $help=Encode::decode_utf8($help);
        Encode::_utf8_off($help);
        }
        $bind_values[ scalar( @bind_values)]=$help;
  }


  $self->debug ("doQuery: query: $query");




wking wrote:
> 
> Hi, all,
> 
>    I'm using simplified Chinese as my mother language. There is two
> problems hen I use a Chinese words as Subject Name.
> 
>    1. I submitted a CSR, the Chinese words become some strange words with
> no meanings when I check it in RA. I've changed the Mysql's client and
> server's default character to utf-8.
> 
>    2.I can edit the CSR, and repair the Chinese words to correct ones. but
> when I issue the request in CA. A Error ocurred as bellow:
> Error while issuing Certificate to 刘百祥 (filename:
> /usr/local/var/openca/tmp/0D.req). 
> OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert:
> OpenSSL fails (7777067). Using configuration from
> /usr/local/etc/openca/openssl/openssl/User.conf
> Check that the SPKAC request matches the signature
> Signature ok
> ERROR: adding extensions in section default
> 3181:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too
> large:a_object.c:108:
> 3181:error:0D064083:asn1 encoding routines:a2d_ASN1_OBJECT:invalid
> separator:a_object.c:124:
> 3181:error:22075077:X509 V3 routines:v2i_GENERAL_NAME_ex:bad
> object:v3_alt.c:468:value=04577
> 3181:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
> extension:v3_conf.c:93:name=subjectAltName, value=@subject_alt_name
> error in ca
> ).
> 
>    Who will give me some suggestion except not using Chinese ?
> 
> p.s. The CRR is like this:
> Variable Value 
> Request Version 1 
> Serial Number 3104 
> Common Name 刘百祥 
> E-Mail bx...@fu... 
> Subject Alternative Name ema...@fu...
> otherName.1=1.3.6.1.4.1.311.25.1;UTF8:04828 RID.2=04577  
> Role User 
> Lifetime (days) n/a 
> Not before (YYMMDDhhmmss) n/a 
> Not after (YYMMDDhhmmss) n/a 
> Lifetime check Lifetime would be ok. 
> LOA High 
> Distinguished Name serialNumber=206,CN=刘百祥, OU=Users, O=Fudan, C=CN 
> Submitted on Thu Nov 27 10:55:14 2008 UTC 
> 
> 

-- 
View this message in context: http://www.nabble.com/Problems-about-multi-bytes-language-contents-tp20717745p20832193.html
Sent from the openca-users mailing list archive at Nabble.com.