[cabfpub] Has anyone tried using DirectoryName constraints?

[Ryan Hurst]

I have blogged on most of the issues:

http://unmitigatedrisk.com/?p=198
http://unmitigatedrisk.com/?p=201
http://unmitigatedrisk.com/?p=24

The test are just regular X509 DN oddities like RDN ordering, etc.

Can you give more insights into the interoperability problem in question?

Ryan Hurst
Chief Technology Officer
GMO Globalsign

twitter: @rmhrisk
email: ryan.hurst at globalsign.com
phone: 206-650-7926

Sent from my phone, please forgive the brevity.

> On Oct 30, 2013, at 10:21 AM, Gervase Markham <gerv at mozilla.org> wrote:
> 
>> On 30/10/13 17:14, Ryan Hurst wrote:
>> We have. RDN ordering and encoding are the number one issues that we ran into. Happy to help.
> 
> Lovely :-) I remember Steve saying something about this as well. Are you
> able to write up a short specific doc about what you discovered and
> pitfalls to avoid?
> 
> There is a situation brewing where a cert needs to be deployed quickly
> and is running into compatibility issues, so your help would be most
> welcome. :-)
> 
> Gerv
>