 |
 |
Indeed. Stephen Burke wrote: > Testbed Support for GridPP member institutes [mailto:TB- > >> [log in to unmask]] On Behalf Of Mike Jones via mobile said: >> But this is not a bug in the way we issue certificates or how the voms >> server works but a longstanding issue with how middleware uses them and >> how the various libraries decode them. Ultimately changing the >> operation of the CA might be the pragmatic solution but it doesn't fix >> the underlying issue. >> > > The underlying issue is not really fixable in any fundamental way, the problem is the lack of a standards body to decide which format is correct. In practice the only way out is not to use the email address DN component at all, and that has been the recommendation for CAs for many years, but unfortunately the UK CA has not implemented it up to now. > > Stephen > >