DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Special character in S(State) of subject getting changed while generating CSR using crypto tool

  • 1.  Special character in S(State) of subject getting changed while generating CSR using crypto tool

    Posted Thu November 28, 2024 09:43 AM

    Hi Everyone, I'm generating CSR and Private key using crypto tool to renew existing certificate with special charater in S field of subject. While generating CSR, I see S=Haryāna is the value in existing certificate and provided the same value but when looking at CSR file, it got changed to S = Haryāna. It seems to be some encoding conversion happened in the background while generating CSR in DataPower crypto tool and ā doesn't seem to be supported in ANSI encoded text. Could someone help how to get this sorted since I need to have same value for DN in the newly generated CSR/Certificate.



    ------------------------------
    Shanmuga Rajendra
    Datapower admin
    ------------------------------


  • 2.  RE: Special character in S(State) of subject getting changed while generating CSR using crypto tool

    Posted Fri November 29, 2024 09:49 AM

    Hi,

    you seem to have uncovered a DataPower bug, please create a support ticket.

    I used WebGUI crypto tool with ST=Haryāna is (not S) and downloaded the created temporary:///foo.csr.
    Then I saw what you reported:
    $ openssl asn1parse -i -in foo.csr | grep Hary
       35:d=5  hl=2 l=  10 prim:      UTF8STRING        :Haryāna
    $



    ------------------------------
    Hermann Stamm-Wilbrandt
    Compiler Level 3 support, IBM DataPower Gateways
    IBM
    Boeblingen
    ------------------------------