From d68044b216485e1bc9d564c5c56def2f616294e3 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 5 Jan 2026 10:50:24 +0100 Subject: [PATCH] identification: Add support for organizationIdentifier in DNs These are e.g. used in eIDAS certificates. --- src/libstrongswan/asn1/oid.txt | 1 + src/libstrongswan/utils/identification.c | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/src/libstrongswan/asn1/oid.txt b/src/libstrongswan/asn1/oid.txt index b9c3189cd..c35091022 100644 --- a/src/libstrongswan/asn1/oid.txt +++ b/src/libstrongswan/asn1/oid.txt @@ -40,6 +40,7 @@ 0x36 "dmdName" OID_DMD_NAME 0x41 "pseudonym" OID_PSEUDONYM 0x48 "role" OID_ROLE + 0x61 "organizationIdentifier" OID_ORGANIZATION_ID 0x1D "id-ce" 0x09 "subjectDirectoryAttrs" 0x0E "subjectKeyIdentifier" OID_SUBJECT_KEY_ID diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c index 57b1af701..322c2c95e 100644 --- a/src/libstrongswan/utils/identification.c +++ b/src/libstrongswan/utils/identification.c @@ -94,6 +94,7 @@ static const x501rdn_t x501rdns[] = { {"STREET", OID_STREET_ADDRESS, ASN1_PRINTABLESTRING}, {"O", OID_ORGANIZATION, ASN1_PRINTABLESTRING}, {"OU", OID_ORGANIZATION_UNIT, ASN1_PRINTABLESTRING}, + {"organizationIdentifier", OID_ORGANIZATION_ID, ASN1_PRINTABLESTRING}, {"T", OID_TITLE, ASN1_PRINTABLESTRING}, {"D", OID_DESCRIPTION, ASN1_PRINTABLESTRING}, {"postalAddress", OID_POSTAL_ADDRESS, ASN1_PRINTABLESTRING}, @@ -114,7 +115,7 @@ static const x501rdn_t x501rdns[] = { {"unstructuredName", OID_UNSTRUCTURED_NAME, ASN1_IA5STRING}, {"UA", OID_UNSTRUCTURED_ADDRESS, ASN1_PRINTABLESTRING}, {"unstructuredAddress", OID_UNSTRUCTURED_ADDRESS, ASN1_PRINTABLESTRING}, - {"TCGID", OID_TCGID, ASN1_PRINTABLESTRING} + {"TCGID", OID_TCGID, ASN1_PRINTABLESTRING}, }; /**