[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

GOST: Bad DNs in RFC 4491 examples



I guess it is too late to put sensible distinguished names in the sample certificates [issuer and subject fields in certs from sections 4.1 and 4.2].

1. An email address should go in the subjectAltName.rfc822Name extension.  [Actually it MUST go there according to the last paragraph of section 4.1.2.6 "Subject" in RFC 3280]
2. The country, org and common name RDNs are in the wrong order.

Current DN (in pseudo RFC2253 format and pseudo value notation):

EMAILADDRESS=GostR3410-94@xxxxxxxxxxx,C=RU,O=CryptoPro,CN=GostR3410-94 example

 subject rdnSequence:{
   commonName utf8String:"GostR3410-94 example"
   / organizationName utf8String:"CryptoPro"
   / countryName "RU"
   / emailAddress "GostR3410-94@xxxxxxxxxxx"
 },