TLSv1.2 Distinguished Names Length 0 / how to set it

[Olivier Germain]

Good afternoon,

I am new in Openssl, SSL. So please excuse my poor knowledge.

We are using Openssl 1.0.2j as a 3rdparty in our software to establish SSL
connection. We can be a server and/or a client.

We have a requirement to implement the  Distinguished Name in the response
received by the client. Hopefully I am ok.

To test the connectivity, I am using this command:
/opt/tibco/fp390hf1/3rdparty/linux/openssl/1.0.2j_x86_64/bin/openssl
s_client -connect 192.168.127.146:9443 -cert
/home/tibco/sslcerts/Certificates/client.pem -key
/home/tibco/sslcerts/Keys/client_priv.key -CAfile /home/tibco/sslcerts/CA/
trustedca.ca

In my software logs, I can see that the connection was accepted as below:
2022-01-18
11:55:58.115908|DEBUG|netmanca:5|drv|137707586761066:6|CONNECTION ACCEPTED
from address <SSL:192.168.127.146:50534>
2022-01-18
11:56:01.214486|DEBUG|netmanca:10|drv|137707586761066:6|CONNECTION RECV <1>
bytes received, data <
>

I took some tcpdump to analyze the data received from the client and
replied back to the client. I can see that the Distinguished Name has a
length of 0.

[image: image.png]

I apologize in advance for the question and the poor details. How can I set
in my SSL code the value for the distinguished Name?

Our client pointed us to the following RFC but I am not sure to
understand where to add this information in my code.
This information can be inserted during the TLS handshake, in the
"certificate request" message, in the field "DistinguishedName".
See https://tools.ietf.org/html/rfc5246#page-53 7.4.4. Certificate Request
opaque DistinguishedName<1..2^16-1>;

struct {
ClientCertificateType certificate_types<1..2^8-1>;
SignatureAndHashAlgorithm
supported_signature_algorithms<2^16-1>;
DistinguishedName certificate_authorities<0..2^16-1>;
} CertificateRequest;


Please let me know if you need further details from my side.
Thank you very much in advance for your help.
Best regards

-- 
Olivier GERMAIN
TIBCO Support

TIBCO software
18, rue du 4 Septembre
75002 Paris, France
Mobile : +33 6 45 30 23 31
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20220119/275d0f83/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 49337 bytes
Desc: not available
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20220119/275d0f83/attachment-0001.png>