53127 - Accept UTF8String encoding for attributes in Names

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P2)

Description

[Terry Hayes]

The library should accept the UTF8String encoding of directory string values 
found in X.500 names.  This encoding is mandated for certificates created after 
2003.  It should be added as soon as possible to allow for smooth upgrading of 
the PKI infrastructure.

NOTE: we do not need to generate UTF8String (yet).

Comment 1

[Terry Hayes]

Setting target to 3.1 (I know this is the current release).  Please see the 
attachment for diffs.

Comment 2

[Terry Hayes]

Attachment: Diffs to secname.c

Comment 3

[Wan-Teh Chang]

Terry, one question about the patch.  The comment
        /* Convert 8-bit Latin (ISO 8859-1) to UTF8 */
seems out of place under case SEC_ASN1_T61_STRING.

Comment 4

[Terry Hayes]

The stray comment is indicating the location of changes that need to be made for 
a different feature (T61 character handling).  Please ignore it.

Comment 5

[Wan-Teh Chang]

Reassigned to Terry.

Should this fix go into 3.0.1?

Comment 6

[Terry Hayes]

Change is checked in, but I don't know how to QA this in the test suite.  I've 
built a version of PSM that accepts certificates with this encoding as a 
one-time test.