Comments (4)
Hi,
I'll have a look at this. Please give me the following info :
- Yaog & Operating system version
- Do you have this error when generating self signed cert or CSR ?
Regards,
from yaog.
I managed to reproduce the bug, will be working on soon.
from yaog.
Hi,
Looking at the RFC5280 page 123, the common name should be less than 64 caracters ("ub" is for upper bound) : "ub-common-name INTEGER ::= 64"
Common name (CN) is composed of :
- The certificate name (can be URL but also something else)
- if an email is provided, then the string "/emailAddress=<email>" is added to it.
If length of name + email + "/emailAddress=" is more than 64 caracters then it leads to an error.
This seems to be harcoded in OpenSSL and for good reasons as the RFC says : "specifications of Upper Bounds MUST be regarded as mandatory", so any certificate with more than 64 caracters in CN will be invalid.
I suggest you put a short name in the "name (CN)", set the email and add the real URL as a SubjectAltName (click "add" in the X509 extensions box ans choose SubjectAltName ).
/Patrick
from yaog.
Feel free to open the case again if you have comments or questions regarding this.
from yaog.
Related Issues (13)
- KeySpec AT_KEYEXCHANGE HOT 11
- Impossible generate certs HOT 4
- generating a P12 file containing a Pem HOT 4
- document how to fix the windows 10 fonts DPI issue
- x509 extensions are not included in CSR HOT 2
- cannot load certificate in binary format
- 3072 bit RSA keys HOT 1
- Feature Request: Save x509 extensions in loadable file
- Feature Request Combine Private Key and CRT file to make Self Signed Cert in PFX format
- Update OpenSSL to version 1.1.1 HOT 3
- Can't find the exe HOT 1
- interface not printing well HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from yaog.