----- Original Message -----

--GRPZ8SYKNexpdSJ7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline

On Fri, Feb 18, 2011 at 02:56:16PM -0800, Howard Chu wrote:

...

re: TLS Authentication Identity Format

Strictly speaking, the order of components is not changed at all. The sequence of RDNs in the DN is what it is; just that the convention for *displaying* it is ass-backwards in LDAP. I'm afraid the wording here will confuse people into thinking that the *semantics* of the DN are changed, when it's only a display issue.

Good point. Updated wording attached.

Andrew

Thanks for all this Andrew, much appreciated!