Re: [RFR] templates://ssl-cert/{templates}

From: Justin B Rye <jbr(at)edlug.org.uk>
Date: Sun Sep 23 2007 - 12:10:45 EDT

Christian Perrier wrote:
> Your review should be sent as an answer to this mail.

I've got no complaints about the control file.

> Template: make-ssl-cert/statename
> Type: string
> _DefaultChoice: Some-State
> _Description: State or province name:
> Please enter the name of the country's subdivision to use in the SSL
> certificate.
> .
> It will become the 'stateOrProvinceName' field of the generated SSL
> certificate.

"Country's subdivision" doesn't work. I'd suggest "political subdivision".

Given that the default countryName is GB, it would help if the DefaultChoice entry gave some hint as to how I would be expected to fill this in - "Scotland"? "Lothian & Borders"? "Midlothian"? Or what? I notice that my fellow Edinburgh resident Steve uses "Scotland" in "http://www.debian-administration.org/articles/349", so I'll assume that approach is standard and suggest the DefaultChoice value of "England" instead of "Some-State".

> Type: string
> _DefaultChoice: One Organization
> _Description: Organisation name:

                      ^

> Please enter the name of the company or organization to use in the SSL
> certificate.
> .
> It will become the 'organisationName' field of the generated SSL certificate.

                             ^

The template-names (which nobody sees) have isation; the fields in the RFCs have ization. I can understand the urge to confuse and annoy en_US users in revenge for SSL's ethnocentric assumption that we all live in towns or cities in states or provinces, but I think it's a bad idea to mix locales like this.

Also: surely the obvious example organisation is example.org, instead of this "One Organization"? What would they be doing spelling it like that anyway, if they're specifically in countryName=GB? Okay, I wasn't going to, but I'm changing the DefaultChoice values. Except for "countryName=GB" - it makes sense to remind users from the United Kingdom of Great Britain and Northern Ireland that they shouldn't use "UK", they have to follow the official slightly-broken ISO-3166 standard.

Better suggestions for "canonical default localityName" etc welcomed...

> Template: make-ssl-cert/ouname

[...]
> Please enter the name of the division or section of the organization, to use

                                                                       ^

> in the SSL certificate.
> .
> It will become the 'organisationalUnitName' field of the generated SSL certificate.

Defining, therefore no comma.

-- 
JBR
Ankh kak! (Ancient Egyptian blessing)

-- To UNSUBSCRIBE, email to debian-apache-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Received on Sun Sep 23 12:33:56 2007