IBM Support

How to use ',' (comma) in value of RDNs.

Question & Answer


Question

I would like to create a certificate request using LMI (Manage : System Settings -> Secure Settings : SSL Certificates). A RDN contains ',' like this : ... Co, LTD... . How can I escape the comma ?

Answer

You can use backslash to escape ',', which is used as a RDN separator.

For example, cn=testsrv.example.com, o=WebSEAL Co\, LTD.,c=us

Please do not use '"' (double quotation) to escape comma in RDN like this: cn=testsrv.example.com, o="WebSEAL Co, LTD.",c=us

In this case, a space in front of 'LTD' will be removed.

This issue can be observed even if you used gsk8capicmd_64. So, please use backslash to escape comma. Here are example steps for gsk8capicmd_64.


% gsk8capicmd_64 -keydb -create -db test.kdb -pw password -stash
% gsk8capicmd_64 -certreq -create -db test.kdb -stashed -label succ -dn 'cn=testsrv.example.com,o=IBM CO\, LTD.,c=us' -file succ.req

(Please use appropriate file name, password, and dn for your requirement.)

[{"Product":{"code":"SSPREK","label":"Tivoli Access Manager for e-business"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General Information","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"8.0;9.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Product Synonym

ISAM

Document Information

More support for:
Tivoli Access Manager for e-business

Software version:
8.0, 9.0

Operating system(s):
Appliance

Document number:
551069

Modified date:
16 June 2018

UID

swg21989984

Manage My Notification Subscriptions