RFC: Netx - Fix Certificate name display

Omair Majid omajid at redhat.com
Wed Jun 24 13:28:50 PDT 2009


Deepak Bhole wrote:
> * Deepak Bhole <dbhole at redhat.com> [2009-06-24 14:30]:
>> * Omair Majid <omajid at redhat.com> [2009-06-23 16:34]:
>>> Hi,
>>>
>>> This patch addresses two issues with Netx code dealing with Certificates.
>>>
>>> First, Netx' doesnt know much about the escaping rules of x500  
>>> certificate principal names. For example if Netx tries to load  
>>> j3dcore[1] , it shows the publisher as:
>>> sun microsystems\
>>> RFC 2253 [2] describes the results completly; this patch implements that  
>>> partially to deal with the most common cases. So the previous text now  
>>> shows up as:
>>> sun microsystems, inc
>>>
>>> Second, there are three copies of getCN(String) in Netx (including a  
>>> public static version). The patch removes two copies and modifies the  
>>> code to call SecurityUtil.getCN.
>>>
>>>
>> Whatever is implemented seems compliant with the BNF in the RFC. And it
>> is much better than the current system that just dumps it raw. Assuming
>> you have tested this, go ahead and apply.
>>
> 
> Oh but do add a FIXME: in the comment so that we know it is not
> complete and can track it.
> 
Done. Pushed as changeset 6d968e7aa1f4.

Thanks,
Omair



More information about the distro-pkg-dev mailing list