Encoding error when using GeneralName.directoryName

[mho000]

Hi,

Thank for this library. It helped a lot.

I'm trying to create a certificate request that has an alternative name of the format:

DirName:/SN=1-acme|2-1|3-259727-df60e760-53ea-4a28-b79c-793bc7fe76b7/UID=112345678900003/title=0100/registeredAddress=Prince Faisal Bin Fahad Street/businessCategory=Cafe

and ran into an encoding error when using the GeneralName.directoryName case.

badValue(Optional(ShieldX509.GeneralName.directoryName([[{joint-iso-itu-t(2) ds(5) attributeType(4) surname(4)}=1-acme|2-5|3-259727-df60e760-53ea-4a28-b79c-793bc7fe76b7], [{itu(0) data(9) pss(2342) ucl(19200300) pilot(100) pilotAttributeType(1) userId(1)}=112345678900003], [{joint-iso-itu-t(2) ds(5) attributeType(4) title(12)}=0100], [{joint-iso-itu-t(2) ds(5) attributeType(4) registeredAddress(26)}=Prince Faisal Bin Fahad Street], [{joint-iso-itu-t(2) ds(5) attributeType(4) businessCategory(15)}=Cafe]])), PotentASN1.SchemaState.SchemaError.Context(codingPath: [AnyCodingKey(stringValue: "0", intValue: 0)], debugDescription: "No schemas [[0] SEQUENCE ::= {\n  typeId OBJECT IDENTIFIER\n  value [0] EXPLICIT ANY \n} , [1] IA5String , [2] IA5String , [3] ANY , [4] CHOICE ::= {\n  SEQUENCE OF\n    SET SIZE (1..MAX) OF\n      SEQUENCE ::= {\n        type OBJECT IDENTIFIER\n        value ANY\n      }\n} , [5] SEQUENCE ::= {\n  nameAssigner [0] CHOICE ::= {\n    UTF8String (1..9223372036854775807)\n    PRINTABLEString (1..9223372036854775807)\n    TELETEXString (1..9223372036854775807)\n    VISIBLEString (1..9223372036854775807)\n    BMPString (1..9223372036854775807)\n  } OPTIONAL \n  value [1] CHOICE ::= {\n    UTF8String (1..9223372036854775807)\n    PRINTABLEString (1..9223372036854775807)\n    TELETEXString (1..9223372036854775807)\n    VISIBLEString (1..9223372036854775807)\n    BMPString (1..9223372036854775807)\n  } \n} , [6] IA5String , [7] OCTET STRING , [8] OBJECT IDENTIFIER ] match value"))

Here is my code to generate the certificate request:

do {
             let keyPair = try SecKeyPair.Builder(type: .ec, keySize: 256).generate(label: "private-key", flags: [.secureEnclave])
            
            let subject = NameBuilder()
                .add("SA", forType: iso_itu.ds.attributeType.countryName.oid)
                .add("Khobar Branch", forType: iso_itu.ds.attributeType.organizationalUnitName.oid)
                .add("Burger Joint - Khobar Cashier Single", forType: iso_itu.ds.attributeType.commonName.oid)
                .add("Burger Joint", forType: iso_itu.ds.attributeType.organizationName.oid)
                .name
            
            let alternativeName = NameBuilder()
                .add("1-acme|2-5|3-259727-df60e760-53ea-4a28-b79c-793bc7fe76b7", forType: iso_itu.ds.attributeType.surname.oid)
                .add("112345678900003", forType: itu.data.pss.ucl.pilot.pilotAttributeType.userId.oid)
                .add("0100", forType: iso_itu.ds.attributeType.title.oid)
                .add("Prince Faisal Bin Fahad Street", forType: iso_itu.ds.attributeType.registeredAddress.oid)
                .add("Cafe", forType: iso_itu.ds.attributeType.businessCategory.oid)
                .name
            
            let keyUsage: KeyUsage = [.digitalSignature, .nonRepudiation, .keyEncipherment]
            
            let builder = try CertificationRequest.Builder()
                .subject(name: subject)
                .publicKey(keyPair: keyPair, usage: keyUsage)
                .extension(Extension(value: BasicConstraints(ca: false)))
                .addAlternativeNames(names: GeneralName.directoryName(alternativeName))
            
            let csr = try builder.buildInfo().signed(using: keyPair.privateKey, digestAlgorithm: .sha256).encoded()
} catch let e {
            print(e)
}

The certificate request is encoded correctly when the addAlternativeNames method is not used. Please help identifying how this can be handled.

Ps. I considered using GeneralName.otherName but the structure OtherName does not have a public initializer. Therefore, it can't be used.

[kdubb]

@mho000 I just released a new version 2.1.3 with fixes for GeneralName encoding. The code in your original post now works!

[mho000]

Thanks @kdubb. The fix made the code very simple.