In the C-Field of the DN only two characters are allowed. So "C=ZA Par" is invalid.
Regards Thomas > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Auftrag von Brendon Schafer > Gesendet: Donnerstag, 25. August 2005 12:47 > An: openssl-users@openssl.org > Betreff: Re: problems making Certificate Request > > > Dmitry Belyavsky wrote: > > >Hello! > > > >On Thu, 25 Aug 2005, Brendon Schafer wrote: > > > > > >>I got this error message while creating a server certificate: > >> > >>Suse:~ # openssl req -new -subj '/CN=OfficeRunner.local > Par - keyout > >>OR-key.pem -out OR-req.pem -days 3650' > >> > >> > > > >Whether right quote is at place expected or it shoul be > before keyout? > > > > > Not sure if I understood you correctly, but I tried this which is an > earlier variation of the command. I did, however move the > quote (') to > where I understood that you said it should have gone. > Suse:/etc/postfix # openssl req -new -nodes -subj > '/CN=OfficeRunner.local/O=OfficeRunner/C=ZA Par' -keyout > OR-key.pem -out > OR-req.pem -days 3650 > Generating a 1024 bit RSA private key > ..................................++++++ > ....++++++ > writing new private key to 'OR-key.pem' > ----- > problems making Certificate Request > 6481:error:0D07A097:asn1 encoding > routines:ASN1_mbstring_copy:string too > long:a_mbstr.c:154:maxsize=2 > > Thanks again > > Brendon > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
