Re: Subject Alternative Name Help

2010-02-12 Thread rono16
I believe it's an x.509v3 limitation and not specific to openssl. After getting Viktor's hint I did a little research and found that the limitation is set at 2^14. Ron Steffen DETTMER wrote: > > * Victor Duchovni wrote: >> The SSL/TLS record layer has a maximum record size, a >> certificate pr

Re: Subject Alternative Name Help

2010-02-12 Thread rono16
That was it. One @ 13k works and one @18k doesn't. Thanks Victor. Ron Victor Duchovni wrote: > > On Wed, Feb 10, 2010 at 03:23:03PM -0800, rono16 wrote: > >> >> I am using OpenSSL to create a self sign certificate and have a need to >> add >> app

Subject Alternative Name Help

2010-02-11 Thread rono16
I am using OpenSSL to create a self sign certificate and have a need to add approximately 4000, yes 4000, DNS entries (don't ask why) using Subject Alternative Name. I have succeeded in creating a certificate with 500 DNS entries and it works just fine with no noticeable latency accessing the web