Details
Description
Discovered by CT20 when the client send a Create_CSR with all parameters set to zero(Empty Subject Name)
Accroding to the CIP specification vol.8 5-5.7.1 Create_CSR:
The Create_CSR service parameters shall be used for the subject distinguished name in the Certificate Request Information. If any of the following items are null (string size of 0), the device shall use the same value as used in its default device certificate:
- Common Name
- Organization
- Organizational Unit
- City / Locality
- State / County / Region
- Country
- Email address
- Serial number
The current implementation doesn't fill any of the values if it's empty.