Bug 1246494

Summary:	[PKI] enforce utf-8 subject for openssl
Product:	[Retired] oVirt	Reporter:	Alon Bar-Lev <alonbl>
Component:	ovirt-engine-core	Assignee:	Alon Bar-Lev <alonbl>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Jiri Belka <jbelka>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	3.3	CC:	bugs, ecohen, gklein, iheim, jbelka, lsurette, mgoldboi, rbalakri, sbonazzo, yeylon
Target Milestone:	---	Keywords:	CodeChange
Target Release:	3.5.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-09-03 13:54:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1245230

Description Alon Bar-Lev 2015-07-24 12:58:59 UTC

Yet another legacy issue. By default openssl ca use ANSI and not UTF-8 to encode subject name.

The result is UTF8STRING in both cases, but the actual character encoding differs.

Comment 1 Alon Bar-Lev 2015-08-12 10:25:46 UTC

if we can, this is trivial and truly important for 3.5.4.

Comment 2 Moran Goldboim 2015-08-13 13:56:09 UTC

fix introduced a bit late for 3.5.4, in case we respin we'll take it in.

Comment 3 Jiri Belka 2015-08-24 10:05:01 UTC

ok, rhevm-backend-3.5.4.2-1.3.el6ev.noarch

# grep utf /usr/share/ovirt-engine/bin/pki-*.sh
/usr/share/ovirt-engine/bin/pki-create-ca.sh:                   -utf8 \
/usr/share/ovirt-engine/bin/pki-enroll-request.sh:              -utf8 \

Comment 4 Sandro Bonazzola 2015-09-03 13:54:20 UTC

This is an automated message.
oVirt 3.5.4 has been released on September 3rd 2015 and should include the fix for this BZ. Moving to closed current release.