identification: Add support for organizationIdentifier in DNs

These are e.g. used in eIDAS certificates.

diff --git a/src/libstrongswan/asn1/oid.txt b/src/libstrongswan/asn1/oid.txt
index b9c3189cd237e6ce6781617064b0d87a10be7dd3..c3509102276bd93c6c82d74e97bcbf3244648e70 100644 (file)
--- a/src/libstrongswan/asn1/oid.txt
+++ b/src/libstrongswan/asn1/oid.txt
@@ -40,6 +40,7 @@
     0x36                     "dmdName"                                 OID_DMD_NAME
     0x41                     "pseudonym"                               OID_PSEUDONYM
     0x48                     "role"                                            OID_ROLE
+    0x61                     "organizationIdentifier"   OID_ORGANIZATION_ID
   0x1D                       "id-ce"
     0x09                     "subjectDirectoryAttrs"
     0x0E                     "subjectKeyIdentifier"            OID_SUBJECT_KEY_ID

diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c
index 57b1af7015af5a0dbe059ab95107c8b969635a23..322c2c95ed9ac36af3963d1f912a5f11fceb619e 100644 (file)
--- a/src/libstrongswan/utils/identification.c
+++ b/src/libstrongswan/utils/identification.c
@@ -94,6 +94,7 @@ static const x501rdn_t x501rdns[] = {
        {"STREET",                              OID_STREET_ADDRESS,                     ASN1_PRINTABLESTRING},
        {"O",                                   OID_ORGANIZATION,                       ASN1_PRINTABLESTRING},
        {"OU",                                  OID_ORGANIZATION_UNIT,          ASN1_PRINTABLESTRING},
+       {"organizationIdentifier",      OID_ORGANIZATION_ID,    ASN1_PRINTABLESTRING},
        {"T",                                   OID_TITLE,                                      ASN1_PRINTABLESTRING},
        {"D",                                   OID_DESCRIPTION,                        ASN1_PRINTABLESTRING},
        {"postalAddress",               OID_POSTAL_ADDRESS,                     ASN1_PRINTABLESTRING},
@@ -114,7 +115,7 @@ static const x501rdn_t x501rdns[] = {
        {"unstructuredName",    OID_UNSTRUCTURED_NAME,          ASN1_IA5STRING},
        {"UA",                                  OID_UNSTRUCTURED_ADDRESS,       ASN1_PRINTABLESTRING},
        {"unstructuredAddress", OID_UNSTRUCTURED_ADDRESS,       ASN1_PRINTABLESTRING},
-       {"TCGID",                               OID_TCGID,                                      ASN1_PRINTABLESTRING}
+       {"TCGID",                               OID_TCGID,                                      ASN1_PRINTABLESTRING},
 };
 
 /**