-
Notifications
You must be signed in to change notification settings - Fork 31
Description
Hello,
We are setting up a DogtagPKI CA subsystem.
The subject of our CA signing certificate contains the OID 2.5.4.97 / organizationIdentifier field:
CN=CA Signing Certificate,organizationIdentifier=XXXX-12345,O=EXAMPLE,C=US
When starting up the CA subsystem, the authorityDN is added to the LDAP database entry:
ou=authorities,ou=ca,dc=ca,dc=pki,dc=example,dc=com
Because this OID is not present in X500NameAttrMap.java, the CA subsystem tries to add the following authorityDN:
CN=CA Signing Certificate,2.5.4.97=XXXX-12345,O=EXAMPLE,C=US
which is blocked by the LDAP DN syntax check.
Can I open a PR to add the OID / organizationIdentifier field mapping to X500NameAttrMap.java? Is that something you are open to or is there another way to go about this?
Looking forward to your response!