Commit d68044b216 for strongswan.org
commit d68044b216485e1bc9d564c5c56def2f616294e3
Author: Tobias Brunner <tobias@strongswan.org>
Date: Mon Jan 5 10:50:24 2026 +0100
identification: Add support for organizationIdentifier in DNs
These are e.g. used in eIDAS certificates.
diff --git a/src/libstrongswan/asn1/oid.txt b/src/libstrongswan/asn1/oid.txt
index b9c3189cd2..c350910227 100644
--- a/src/libstrongswan/asn1/oid.txt
+++ b/src/libstrongswan/asn1/oid.txt
@@ -40,6 +40,7 @@
0x36 "dmdName" OID_DMD_NAME
0x41 "pseudonym" OID_PSEUDONYM
0x48 "role" OID_ROLE
+ 0x61 "organizationIdentifier" OID_ORGANIZATION_ID
0x1D "id-ce"
0x09 "subjectDirectoryAttrs"
0x0E "subjectKeyIdentifier" OID_SUBJECT_KEY_ID
diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c
index 57b1af7015..322c2c95ed 100644
--- a/src/libstrongswan/utils/identification.c
+++ b/src/libstrongswan/utils/identification.c
@@ -94,6 +94,7 @@ static const x501rdn_t x501rdns[] = {
{"STREET", OID_STREET_ADDRESS, ASN1_PRINTABLESTRING},
{"O", OID_ORGANIZATION, ASN1_PRINTABLESTRING},
{"OU", OID_ORGANIZATION_UNIT, ASN1_PRINTABLESTRING},
+ {"organizationIdentifier", OID_ORGANIZATION_ID, ASN1_PRINTABLESTRING},
{"T", OID_TITLE, ASN1_PRINTABLESTRING},
{"D", OID_DESCRIPTION, ASN1_PRINTABLESTRING},
{"postalAddress", OID_POSTAL_ADDRESS, ASN1_PRINTABLESTRING},
@@ -114,7 +115,7 @@ static const x501rdn_t x501rdns[] = {
{"unstructuredName", OID_UNSTRUCTURED_NAME, ASN1_IA5STRING},
{"UA", OID_UNSTRUCTURED_ADDRESS, ASN1_PRINTABLESTRING},
{"unstructuredAddress", OID_UNSTRUCTURED_ADDRESS, ASN1_PRINTABLESTRING},
- {"TCGID", OID_TCGID, ASN1_PRINTABLESTRING}
+ {"TCGID", OID_TCGID, ASN1_PRINTABLESTRING},
};
/**