Unicode characters are not escaped as expected in the CN field when created with —-newclient flag. For names with unicode characters eg. Szűcs-Mátyás it results in the name showing up scrambled in browsers and not decodable to the original.

I would like to have the characters escaped. I know OpenSSL has a -utf8 flag to allow strings as provided in the CN field.

Thank you!

I've checked out the latest from github and I run the folowing command:

CA-baka --workdir test -C US --ST NY -L "New York" -O "Mythical NY Company" --newca ca.example.com "" -v

And get the folowing output:

Running: openssl version
OpenSSL 0.9.8j-fips 07 Jan 2009
Generating certificate authority certificate
Checking dir test/archive/ca.example.com
Generating New CA certificate
Running: openssl x509 -in test/ca.crt -noout -enddate
Error opening Certificate test/ca.crt
21169:error:02001002:system library:fopen:No such file or directory:bss_file.c:356:fopen('test/ca.crt','r')
21169:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:358:
unable to load certificate
Failed during openssl x509 -in test/ca.crt -noout -enddate at /usr/local/sbin/CA-baka line 321.

It has not created ca.key or ca.crt.

Hey, I was interesting in using these tools but I noticed that --renew can not be used to renew the certificate authority. What do you suggest to be done when the CA expires?