Hey all,

I'm trying to create a CSR using a very long organizationName, but I keep getting the message

140605698299560:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64

I've tried using a local config and in the [ req_distinguished_name ] section setting organizationName_max = 128 and 0.organizationName =128, but neither seem to do the trick [1]. Does anyone know a way to encode these long strings into a CSR?

Example command:
openssl genrsa -out /tmp/priv.tmp 2048 && openssl req -key /tmp/priv.tmp -new -batch -sha256 -subj '/C=XX/ST=State/L=City/O=Really Really Really Really Really Really Really Really Really Really Really Really Really Really Really Really Really Really Really Long Name/OU=/CN=www.example.com/emailAddress=t...@example.com'

1] http://openssl.6102.n7.nabble.com/Max-length-of-company-field-td16133.html

--
Cipriano Groenendal <ci...@byte.nl>
Byte Internet <http://www.byte.nl/>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to