You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <ji...@apache.org> on 2008/03/25 16:57:24 UTC
[jira] Commented: (DIRSTUDIO-310) mangled values in binary or
octetstring attribute types
[ https://issues.apache.org/jira/browse/DIRSTUDIO-310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12581991#action_12581991 ]
Emmanuel Lecharny commented on DIRSTUDIO-310:
---------------------------------------------
I don't think this is a LdapBrowser issue at all.
The signatureRenewal is not an attribute which is described anywhere but in some german document, for some specific postal needs (as far as I can check on the web).
What is necessary here to go any further is the complete description of the signatureRenewal AttributeType, and the syntax for this attributeType.
If this attribute is an OctetString, then the LDIF file will always be encoded as a Base64 String, always bigger than the intial binary value.
> mangled values in binary or octetstring attribute types
> -------------------------------------------------------
>
> Key: DIRSTUDIO-310
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-310
> Project: Directory Studio
> Issue Type: Bug
> Components: studio-ldapbrowser
> Affects Versions: 1.1.0
> Environment: Windows XP,
> ApacheDirectoryStudio-win32-1.1.0.v20080303.exe
> Reporter: Norbert Klasen
> Priority: Critical
> Attachments: DIRSTUDIO-310.ldif
>
>
> Directory Studio mangles attributes that have binary or octet string syntax. For example, the entry at
> ldap://ldap.nrca-ds.de:389/x509serialNumber=174,cn=CA DP Com 5:PN,ou=Signtrust,o=Deutsche Post Com GmbH,c=DE,dc=ldap,dc=nrca-ds,dc=de??base?(objectClass=*)
> has an signatureRenewals attribute, that actually has a size of 776 bytes. However, Directory Studio reports the value as having a size of 1203 and viewing the data in the hex editor shows that the data has been changed.
> For reference: The entry as LDIF export
> # 174, CA DP Com 5:PN, Signtrust, Deutsche Post Com GmbH, DE, ldap.nrca-ds.de
> dn: x509serialNumber=174,cn=CA DP Com 5:PN,ou=Signtrust,o=Deutsche Post Com Gm
> bH,c=DE,dc=ldap,dc=nrca-ds,dc=de
> x509issuer: CN=10R-CA 1:PN, O=Bundesnetzagentur, C=DE
> x509serialNumber: 174
> objectClass: x509caCertificate
> objectClass: signatureRenewalClass
> x509version: 3
> x509subject: CN=CA DP Com 5:PN, OU=Signtrust, O=Deutsche Post Com GmbH, C=DE
> x509validityNotBefore: 20050811082216Z
> x509validityNotAfter: 20071231081931Z
> x509subjectPublicKeyInfoAlgorithm: 1.2.840.113549.1.1.1
> x509signatureAlgorithm: 1.3.36.3.3.1.2
> x509caCert;binary:: MIIDwDCCAyygAwIBAgICAK4wCgYGKyQDAwECBQAwPzELMAkGA1UEBhMCRE
> UxGjAYBgNVBAoMEUJ1bmRlc25ldHphZ2VudHVyMRQwEgYDVQQDDAsxMFItQ0EgMTpQTjAeFw0wNTA
> 4MTEwODIyMTZaFw0wNzEyMzEwODE5MzFaMFsxCzAJBgNVBAYTAkRFMR8wHQYDVQQKDBZEZXV0c2No
> ZSBQb3N0IENvbSBHbWJIMRIwEAYDVQQLDAlTaWdudHJ1c3QxFzAVBgNVBAMMDkNBIERQIENvbSA1O
> lBOMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCA8YGx+S8BrfFkkENEOYJ9kB2c70v3SzJy5d
> 54tdBZ9Hr8VkNSC9KMfm5Mu8Lg0J3i30K3JxWuJ76UiZVOsdjc0FanPoRPJyghM+24NTQGnqvRJcf
> LZ+5YzgNcnVNP27O7eYkhmfSgkhla9abzci5GcTdh4svdzMuyRyw236mDiQIDAQABo4IBszCCAa8w
> DgYDVR0PAQH/BAQDAgIEMBgGCCsGAQUFBwEDBAwwCjAIBgYEAI5GAQEwSgYIKwYBBQUHAQEEPjA8M
> DoGCCsGAQUFBzABhi5odHRwOi8vb2NzcC5ucmNhLWRzLmRlOjgwODAvb2NzcC1vY3NwcmVzcG9uZG
> VyMBIGA1UdIAQLMAkwBwYFKyQIAQEwgbEGA1UdHwSBqTCBpjCBo6CBoKCBnYaBmmxkYXA6Ly9sZGF
> wLm5yY2EtZHMuZGU6Mzg5L0NOPUNSTCxPPUJ1bmRlc25ldHphZ2VudHVyLEM9REUsZGM9bGRhcCxk
> Yz1ucmNhLWRzLGRjPWRlP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5P2Jhc2U/b2JqZ
> WN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwGwYJKwYBBAHAbQMFBA4wDAYKKwYBBAHAbQMFAT
> ASBgNVHRMBAf8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFMPPderAEVNFE/6XZWMAaVMClrlkMB0GA1U
> dDgQWBBQiuyZlB1cV3gbrEB7Md4KnE3l0xjAKBgYrJAMDAQIFAAOBgQAYu6i+yozEQZeQrYXq6ahS
> 0sKYXAKsEm0T8zBJN4JcBa+14JqibPqd6VDfnnxoE6CH140/N55NgajzquATw3nC6rRkFLY7FReQZ
> wp+xpiqH0QuxEsE56LnvuJEF/w/7ucbPGWCP3A3kD7InT7g6tTOaVQSLCI4VVzfX6ksRSaJmA==
> x509keyUsage: keyCertSign
> signatureRenewals:: MIIDBDCCAwAGCSqGSIb3DQEHAqCCAvEwggLtAgEDMQ8wDQYJYIZIAWUDBA
> IDBQAwgYoGCyqGSIb3DQEJEAEEoHsEeTB3AgEBBgorBgEEAcBtAwcBMFEwDQYJYIZIAWUDBAIDBQA
> EQB9dtoJqdAMACROdhHa3sSzLcmAqUy6h91/pxk/LKYAIfTeBM7mY2uCFhSmwP++ygO+DERSAfb/U
> 1DanuXC841ICAgweGA8yMDA4MDMwNTEwNTgyMFoxggJIMIICRAIBATBFMD8xCzAJBgNVBAYTAkRFM
> RowGAYDVQQKDBFCdW5kZXNuZXR6YWdlbnR1cjEUMBIGA1UEAwwLMTJSLUNBIDE6UE4CAgFPMA0GCW
> CGSAFlAwQCAwUAoIHVMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDBPBgkqhkiG9w0BCQQxQgR
> AoT8hsM+R8XGJidkIJuNExuR6gsSzRJ0KLvB0NdwBzg8tj0wfYTjuF7/o+uaWQ7wa/neWeBx+X5W6
> WTaxexbVjTBmBgsqhkiG9w0BCRACLzFXMFUwUzBRMA0GCWCGSAFlAwQCAwUABEBm9Z9GYk+LzNukR
> HfXRqDSZZ2PTrYTzgeclJ1NSm9TRfdxYUWQcKt+7xiL4w1ffa+fPOUiCDh7InAJHH5BiWxpMA0GCS
> qGSIb3DQEBAQUABIIBAHKcZZ7EVojxqIXMLPvLaxhLOQhis0+Yxcq46slaht5PegmlKj5OBOQuxRz
> D4ShyFomkLxNvMvj4yICoozZ/wWawxMEN31iWvTVcQpMp+4ukFUWvgCPbLd9p2s19QnG1O9WNcGw2
> 1C92sRYkNObN/TZa+khxVQM9075k7V6obw6+MFWwU4IAKVhIXxBnVBqLerrBeVO/quisqm2m3l9MZ
> IORa/AQGrafWplYldQKdOiOUO7FJe+nyxq2Wzkg3zElkm8/jU6LXjP7C7pZceOU8ibuDWFKC4kuIl
> 56zQ+YqPQnbixqPxDfIFNMMXiY2C9IpsRk/UnnDJ41Tt7rP0SklcU=
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.