David Horstmann
David Horstmann
I should explain some background to this. Previously, we have clobbered all non-ASCII characters, replacing them with `?` in output and refusing to accept them as input, which caused problems...
(Sorry, slipped and hit the 'close' button by accident)
> I'm more worried about (3), where the cost is bigger (Unicode canonicalization is not something you want on a microcontroller), but the risk is also much bigger: non-canonical names...
Having said that, the standards don't require us to _create_ certificates with normalized UTF-8, only to normalize before comparing names (which we already document that we don't do). But the...
PSA API changes being discussed upstream: ARM-software/psa-api#157
This should now have been fixed by the closing of #7924 via #8025. `mbedtls_x509write_csr_set_subject_name()` should now accept the special characters escaped in the same way as they are emitted by...
Closing as fixed
@mman no problem at all!
@mman This is correct. Dealing with UTF-8 properly is addressed by #7927, which is not completed or merged yet. Currently we do ASCII and then escape things we don't understand...