Add some naming attributes that are not part of the recommended standard set but that ...
10 years, 8 months ago
(2013-08-06 12:26:43 UTC)
#1
Add some naming attributes that are not part of the recommended standard set but
that commonly appear in certs.
Also attempt to decode anything we don't recognize as a DirectoryString before
giving up. For example I commonly see 1.3.6.1.4.1.311.60.2.1.2 - I don't know
what it is but I can parse it.
I've still kept the restriction to raise if the type is known but the value
can't be decoded to a DirectoryString. If that, too, turns out to be too strong
an assumption then I'll change the decoding to be entirely best effort.
On Tue, Aug 6, 2013 at 2:42 PM, <eranm@google.com> wrote: > Totally optional: Have a ...
10 years, 8 months ago
(2013-08-06 13:02:20 UTC)
#3
On Tue, Aug 6, 2013 at 2:42 PM, <eranm@google.com> wrote:
> Totally optional: Have a strict-mode option, which, when set, does not
> try to parse as DirectoryString, keeping the old behaviour.
>
Do you have a use case for this strict mode?
The RFC says: "The type of the component AttributeValue is determined by
the AttributeType; in general it will be a DirectoryString." and in the
first 65k certs, I haven't seen a single one that isn't.
>
https://codereview.appspot.**com/12523044/<https://codereview.appspot.com/125...
>
On 2013/08/06 13:02:20, ekasper wrote: > On Tue, Aug 6, 2013 at 2:42 PM, <mailto:eranm@google.com> ...
10 years, 8 months ago
(2013-08-06 13:34:27 UTC)
#5
On 2013/08/06 13:02:20, ekasper wrote:
> On Tue, Aug 6, 2013 at 2:42 PM, <mailto:eranm@google.com> wrote:
>
> > Totally optional: Have a strict-mode option, which, when set, does not
> > try to parse as DirectoryString, keeping the old behaviour.
> >
>
> Do you have a use case for this strict mode?
>
> The RFC says: "The type of the component AttributeValue is determined by
> the AttributeType; in general it will be a DirectoryString." and in the
> first 65k certs, I haven't seen a single one that isn't.
>
>
> >
>
https://codereview.appspot.**com/12523044/%3Chttps://codereview.appspot.com/1...>
> >
No, I don't have a use case - disregard my suggestion.
Issue 12523044: Recognise more name attributes
Created 10 years, 8 months ago by ekasper
Modified 10 years, 8 months ago
Reviewers: Al Cutter, Eran
Base URL:
Comments: 0