On Wed, Dec 06, 2006, Stuart Gall wrote:

> Found the problem
> There was prompt=no in the cnf file.
> 
> Dont see why that should complain though.
> 

The reason for that is that the DN section needs to be formatted appropriately
if prompt=no is set. That uses the more natural style of:

dn_component = value

whereas without prompt=no it is interpreted as the prompt to use. So when
you have:
        
countryName                     = Country Name (2 letter code)


It would try to set it to "Country Name (2 letter code)" which exceeds 2
characters and hence the error.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to