[strongSwan] FW: Query regarding printableString and uTF8String

prasobh.s25 at wipro.com prasobh.s25 at wipro.com
Mon Nov 9 12:22:13 CET 2015


Hello,

I am facing an issue with the format of DirectoryString. Requesting your valuable advice.

Iam using certificate based authentication for establishing tunnel.

I decoded the IKE_AUTH message and observed a difference in formats present in  "DirectoryString" of "ID_DER_ASN1_DN" of " Identification-Initiator" and
format of "DirectoryString" in Certificate Iam using.

In Identification Initiator, the DirectoryString is "printableString", while the RDN of certificate has DirectoryString as "uTF8String".

As per my understanding, both the DirectoryString used in Certificate and Identification fields (ID type: DER_ASN1_DN (9)) should be the same.

Why is this difference coming ??

Please do explain how Strongswan determines the DirectoryString format ( printableString or uTF8String or teletexString ) for ID type: DER_ASN1_DN (9) in Identification fields.

Thanks and Regards,
Prasobh
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20151109/9b877be9/attachment.html>


More information about the Users mailing list