Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 758 / 840

DNs in Certificate System
758 Red Hat Certificate System Administrator’s Guide • September 2005
Extending Attribute Support
By default, Certificate System supports attribute identified in Table I-2 on page 756. You
can extend the list of attributes supported by server. The syntax for adding additional
X.500Name attributes (or components) is as follows:
X500Name.<NEW_ATTRNAME>.oid=<n.n.n.n>
X500Name.<NEW_ATTRNAME>.class=<string_to_DER_value_converter_class>
Note the following:
Directory String Any character in format as specified in Lightweight Directory Access Protocol (v3):
UTF-8 String Representation of Distinguished Names (see
http://www.ietf.org/rfc/rfc2253.txt
). Certificate System conforms
to all of this standard, including support of using hex numbers to escape characters.
The special characters are as follows:
,
=
+
<
>
#
;
They can be escaped by either a backslash (
\
) before the character or by surrounding
the value in double quotes (“ ”). A few examples are shown below:
Example Corp. \, Ltd.
“Example Corp. , Ltd”
“Example Corp. \, Ltd”
Name \, with \= escaped \+ special \< characters \# like
\> or \”\\\;
“Name , with = s characters < surrounded > by #
quotes; ,=+<>#;”
Name with escaped characters like return \0D or C with
Caron \C4\8D or L\4C
Name with spaces at beginning and end
For additional more examples, check the standards.
Table I-3 Explanation of character sets for DNs (Continued)
Value type Character set allowed