On Wed, Dec 06, 2006, Stuart Gall wrote: > Found the problem > There was prompt=no in the cnf file. > > Dont see why that should complain though. >
The reason for that is that the DN section needs to be formatted appropriately if prompt=no is set. That uses the more natural style of: dn_component = value whereas without prompt=no it is interpreted as the prompt to use. So when you have: countryName = Country Name (2 letter code) It would try to set it to "Country Name (2 letter code)" which exceeds 2 characters and hence the error. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]