On Wed, Sep 06, 2017 at 01:36:55PM +0200, Enrico Zini wrote: > I found the reason: python-cryptography writes the certificate issuer > as UTF8 String while the CA certificate has it as Printable String. > Because of that, the subject names don't match bit-by-bit. Fixed: https://anonscm.debian.org/cgit/debian-sso/debian-sso.git/commit/?id=39280a19fd00493580d840dc2fff89ecc8461e5b Thanks to reaperhulk on #cryptography-dev for the help with making that workaround work. Enrico -- GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini <enrico@enricozini.org>
Attachment:
signature.asc
Description: PGP signature