mallapadi niranjan wrote:
Hi all
I have Fedora Directory Server installed on F9 box
(fedora-ds-base-1.1.3-2.fc9.x86_64). Due to sum bug i guess , i am
unable to create the certificate request through Console that is
Directory Server->Manager Certificates-> Request -> Request
Certificate Manually.
In the Server Name:dhcp7-92.example.com <http://dhcp7-92.example.com>
Organization: Example, Inc.
City/Locality: Raleigh
State/Province: North Carolina
Country/Region: US United States
Click on Show DN and i remove all the double quotes and my DN looks
as below
CN="dhcp7-92.example.com <http://dhcp7-92.example.com>, O=Example,
Inc., L=Raleigh, ST=North Carolina, C=US
When i click on Next it says "Unable to convert DN to certificate name
So i tried with certutil command.
$cd /etc/dirsrv/slapd-dhcp7-92/
$certutil -R -s "C=US, ST=North Carolina, L=Raleigh, O=Example, Inc.,
CN=dhcp7-92.example.com <http://dhcp7-92.example.com>" -o mycert.req -d .
I got the below output
certutil -s: improperly formatted name: "C=US, ST=North Carolina,
L=Raleigh, O=Example, Inc., CN=dhcp7-92.pnq.redhat.com
<http://dhcp7-92.pnq.redhat.com>"
Now if i modify it as "certutil -R -s "C=US, ST=North Carolina,
L=Raleigh, O=Example, CN=dhcp7-92.pnq.redhat.com
<http://dhcp7-92.pnq.redhat.com>" -o mycert.req -d ."
it works.
The same with the console i.e If Organization title is modified from
"Example, Inc. " to "Example" it works.
So the space and period symbol in (Example, Inc.) is an issue ?
I think space and period are fine - you don't have a problem with them
in other parts of your DN. The problem is the comma ',' after Example -
try escaping the comma e.g.
"C=US, ST=North Carolina, L=Raleigh, O=Example\\,
Inc.,CN=dhcp7-92.pnq.redhat.com <http://dhcp7-92.pnq.redhat.com>"
Not sure about the correct escape syntax
But this doesn't happen when i create certifcate requests with openssl
commands.
Hmm - maybe openssl is smart enough to handle the comma?
Regards
Niranjan
------------------------------------------------------------------------
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
