Better support for the different Attribute Types from IETF PKIX (RFC 5280)
diff --git a/library/oid.c b/library/oid.c
index a2b929b..2a61193 100644
--- a/library/oid.c
+++ b/library/oid.c
@@ -196,6 +196,38 @@
"postalCode",
},
{
+ { ADD_LEN( OID_AT_SUR_NAME ), "id-at-surName", "Surname" },
+ "SN",
+ },
+ {
+ { ADD_LEN( OID_AT_GIVEN_NAME ), "id-at-givenName", "Given name" },
+ "GN",
+ },
+ {
+ { ADD_LEN( OID_AT_INITIALS ), "id-at-initials", "Initials" },
+ "initials",
+ },
+ {
+ { ADD_LEN( OID_AT_GENERATION_QUALIFIER ), "id-at-generationQualifier", "Generation qualifier" },
+ "generationQualifier",
+ },
+ {
+ { ADD_LEN( OID_AT_TITLE ), "id-at-title", "Title" },
+ "title",
+ },
+ {
+ { ADD_LEN( OID_AT_DN_QUALIFIER ),"id-at-dnQualifier", "Distinguished Name qualifier" },
+ "dnQualifier",
+ },
+ {
+ { ADD_LEN( OID_AT_PSEUDONYM ), "id-at-pseudonym", "Pseudonym" },
+ "pseudonym",
+ },
+ {
+ { ADD_LEN( OID_DOMAIN_COMPONENT ), "id-domainComponent", "Domain component" },
+ "DC",
+ },
+ {
{ NULL, 0, NULL, NULL },
NULL,
}
diff --git a/library/x509_create.c b/library/x509_create.c
index 7637e61..8e12c14 100644
--- a/library/x509_create.c
+++ b/library/x509_create.c
@@ -53,18 +53,30 @@
{
if( c - s == 2 && strncasecmp( s, "CN", 2 ) == 0 )
oid = OID_AT_CN;
+ else if( c - s == 10 && strncasecmp( s, "commonName", 10 ) == 0 )
+ oid = OID_AT_CN;
else if( c - s == 1 && strncasecmp( s, "C", 1 ) == 0 )
oid = OID_AT_COUNTRY;
+ else if( c - s == 11 && strncasecmp( s, "countryName", 11 ) == 0 )
+ oid = OID_AT_COUNTRY;
else if( c - s == 1 && strncasecmp( s, "O", 1 ) == 0 )
oid = OID_AT_ORGANIZATION;
+ else if( c - s == 16 && strncasecmp( s, "organizationName", 16 ) == 0 )
+ oid = OID_AT_ORGANIZATION;
else if( c - s == 1 && strncasecmp( s, "L", 1 ) == 0 )
oid = OID_AT_LOCALITY;
+ else if( c - s == 8 && strncasecmp( s, "locality", 8 ) == 0 )
+ oid = OID_AT_LOCALITY;
else if( c - s == 1 && strncasecmp( s, "R", 1 ) == 0 )
oid = OID_PKCS9_EMAIL;
else if( c - s == 2 && strncasecmp( s, "OU", 2 ) == 0 )
oid = OID_AT_ORG_UNIT;
+ else if( c - s == 22 && strncasecmp( s, "organizationalUnitName", 22 ) == 0 )
+ oid = OID_AT_ORG_UNIT;
else if( c - s == 2 && strncasecmp( s, "ST", 2 ) == 0 )
oid = OID_AT_STATE;
+ else if( c - s == 19 && strncasecmp( s, "stateOrProvinceName", 19 ) == 0 )
+ oid = OID_AT_STATE;
else if( c - s == 12 && strncasecmp( s, "emailAddress", 12 ) == 0 )
oid = OID_PKCS9_EMAIL;
else if( c - s == 12 && strncasecmp( s, "serialNumber", 12 ) == 0 )
@@ -73,6 +85,28 @@
oid = OID_AT_POSTAL_ADDRESS;
else if( c - s == 10 && strncasecmp( s, "postalCode", 10 ) == 0 )
oid = OID_AT_POSTAL_CODE;
+ else if( c - s == 11 && strncasecmp( s, "dnQualifier", 11 ) == 0 )
+ oid = OID_AT_DN_QUALIFIER;
+ else if( c - s == 5 && strncasecmp( s, "title", 5 ) == 0 )
+ oid = OID_AT_TITLE;
+ else if( c - s == 7 && strncasecmp( s, "surName", 7 ) == 0 )
+ oid = OID_AT_SUR_NAME;
+ else if( c - s == 2 && strncasecmp( s, "SN", 2 ) == 0 )
+ oid = OID_AT_SUR_NAME;
+ else if( c - s == 9 && strncasecmp( s, "givenName", 9 ) == 0 )
+ oid = OID_AT_GIVEN_NAME;
+ else if( c - s == 2 && strncasecmp( s, "GN", 2 ) == 0 )
+ oid = OID_AT_GIVEN_NAME;
+ else if( c - s == 8 && strncasecmp( s, "initials", 8 ) == 0 )
+ oid = OID_AT_INITIALS;
+ else if( c - s == 9 && strncasecmp( s, "pseudonym", 9 ) == 0 )
+ oid = OID_AT_PSEUDONYM;
+ else if( c - s == 19 && strncasecmp( s, "generationQualifier", 19 ) == 0 )
+ oid = OID_AT_GENERATION_QUALIFIER;
+ else if( c - s == 15 && strncasecmp( s, "domainComponent", 15 ) == 0 )
+ oid = OID_DOMAIN_COMPONENT;
+ else if( c - s == 2 && strncasecmp( s, "DC", 2 ) == 0 )
+ oid = OID_DOMAIN_COMPONENT;
else
{
ret = POLARSSL_ERR_X509_UNKNOWN_OID;