[gnutls-devel] GnuTLS | Inconsistent subject name processing results (#1740)
Read-only notification of GnuTLS library development activities
gnutls-devel at lists.gnutls.org
Sun Sep 21 10:02:13 CEST 2025
Jasper Sinclair created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1740
## Description of problem:
Hello, I am a new explorer. For two subject names that differ only in capitalization.According to the X509 RFC, section 4.1.2.6:Conforming implementations shall perform a case-insensitive exact match when comparing domainComponent attributes in distinguished names.openssl shows them as the same. gnutls also showed them as different.I have provided the use case and script in the attachment.
[x509_name_cmp (1).zip](/uploads/c18c036e80dd0bd382011257b2b242ed/x509_name_cmp__1_.zip)
## Version of gnutls used:
gnutls-cli 3.7.3
## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)
Ubuntu
## How reproducible:
Steps to Reproduce:
* one:gcc -o to-gnutls to-gnutls.c $(pkg-config --cflags --libs gnutls)
* two:./to-gnutls
## Actual results:
inconsistent output.
## Expected results:
Consistent output.
--
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1740
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250921/41ae1a37/attachment.html>
More information about the Gnutls-devel
mailing list