Hi all,

Coordination Center for TLD .RU/.РФ is happy to announce a draft implementation of RFC 8398 "Internationalized Email Addresses in X.509 Certificates" for OpenSSL: https://cctld.ru/en/news/news_detail.php?ID=21240


The implementation and some test examples are available for download here: https://cctld.ru/files/books/EAI.pdf (in Russian)

Direct links:

Draft implementation - https://cctld.ru/files/eai/rfc8398.diff
Test examples - https://cctld.ru/files/eai/root.tar.gz
Instructions - https://cctld.ru/files/eai/README.8398


The implementation covers the following cases:
- Displaying the EAI in X.509 certificates
- Verifying NameConstraints in X.509 certificate chains of trust
- Matching EAIs in X.509 with provided EAI.

Feel free to test the patch and send feedback to pr@cctld.ru or to me directly.
--