On Thu, Jul 06, 2023 at 11:45:57AM -0400, Robert Moskowitz wrote:
> I think there is a bug....
>
> I can provide the CSR and cert both in pem.
More likely your CA config file does not specify what do with UID RDNs
when signing CSRs. The default config file has:
# A few difference way of specifying how similar the request should look
# For type CA, the listed attributes must be the same, and the optional
# and supplied fields are just that :-)
policy = policy_match
# For the CA policy
[ policy_match ]
countryName = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
# For the 'anything' policy # At this point in time, you must list all acceptable 'object'
# types.
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
No mention of UIDs there.
--
Viktor.
