OpenSSL? UID DN field

OpenSSL? 0.9.8 conforms with LDAP on the UID field which in now defined as UserId OID: 0.9.2342.19200300.100.1.1. Unfortunately, this is not true for Apache at least till version 2.2.14 (may be later depending on distro). Apache's SSL_CLIENT_S_DN_UID variable point to x500UniqueIdentifier if compiled against OpenSSL? > 0.9.7 or =UniqueIdentifier for OpenSSL? < 0.9.7

Notice that the unique identifier fields are bit string type and rarely used. The UserId field is case ignored.

This field shouldn't be depended upon! Most webservers will not work with it.

---

References

1. https://issues.apache.org/bugzilla/show_bug.cgi?id=45107
2. x500UniqueIdentifier
3. UserId

-- AvishaiIshShalom - 12 Feb 2010