Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PRINTABLE_STRING in signing request prevents wildcard domains #468

Closed
kevinpt opened this issue Apr 28, 2016 · 3 comments
Closed

PRINTABLE_STRING in signing request prevents wildcard domains #468

kevinpt opened this issue Apr 28, 2016 · 3 comments

Comments

@kevinpt
Copy link

kevinpt commented Apr 28, 2016

When creating a certificate signing request, x509_write_name() uses the PRINTABLE_STRING type for everything but emailAddress. This prevents the use of asterisks to create a wildcard domain as part of the common/domain name since they aren't part of that character set. The request will still be created but Openssl complains about invalid characters and stops processing the request.

It would be more useful to also use IA5_STRING for the MBEDTLS_OID_AT_CN OID.

@ciarmcom
Copy link

ARM Internal Ref: IOTSSL-733

@simonbutcher
Copy link
Contributor

Hi @kevinpt,

This isn't a planned enhancement, but we would certainly welcome a community contribution that provides this as a configurable option.

@simonbutcher simonbutcher added the help-wanted This issue is not being actively worked on, but PRs welcome. label May 4, 2016
@hanno-becker hanno-becker added fix available bug component-x509 and removed help-wanted This issue is not being actively worked on, but PRs welcome. enhancement labels Nov 6, 2018
@hanno-becker
Copy link

Fixed through #1641.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants