Hi Gerardo --

Thanks, now I hit the next roadblock: the proxy generated includes an alternative name for the subject:

        X509v3 Subject Alternative Name: 
            othername:<unsupported>, email:[log in to unmask]

but the RFC forbids it:
http://tools.ietf.org/html/rfc3820#section-3.5

And JGlobus checks it:
https://github.com/jglobus/JGlobus/blob/master/ssl-proxies/src/main/java/org/globus/gsi/trustmanager/X509ProxyCertPathValidator.java#L503

—
Reply to this email directly or view it on GitHub.

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1