Testbed Support for GridPP member institutes
> [mailto:[log in to unmask]] On Behalf Of Henry Nebrensky said:
> i.e. emailAddress instead of Email as is configured within the VOMS
> server. Are these really equivalent?
Sort of. The underlying representation of DNs is in terms of OIDs, which
are basically big numbers. There is supposed to be a standard textual
representation for each OID - except that this was never properly
standardised, and there are *three* textual representations for the
email OID in common use: Email, emailAddress and E. In general I thought
CAs were supposed to have stopped issuing CAs with email addresses in
the DN to avoid these problems ...
Stephen
--
Scanned by iCritical.
|