CN > 64 chars

[Juan Angel Martin Gomez [AC Camerfirma]]

Hello,

 

I’m trying to make a CSR with a CN that has more than 64 chars

 

I know that the upper bound is 64 chars, but I can see in the RFC 5280 this
note:

 

-- Note - upper bounds on string types, such as TeletexString, are

-- measured in characters.  Excepting PrintableString or IA5String, a

-- significantly greater number of octets will be required to hold

-- such a value.  As a minimum, 16 octets, or twice the specified

-- upper bound, whichever is the larger, should be allowed for

-- TeletexString.  For UTF8String or UniversalString at least four

-- times the upper bound should be allowed.

 

I used in the config file string_mask = utf8only, but I get the error again:

 

2072:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too
long:.\crypto\asn1\a_mbstr.c:154:maxsize=64

 

 

Can you help me?

 

Thanks in advance

 

Juan Ángel Martín Gómez