I believe it's an x.509v3 limitation and not specific to openssl.
After getting Viktor's hint I did a little research and found that the
limitation is set at 2^14.
Ron
Steffen DETTMER wrote:
>
> * Victor Duchovni wrote:
>> The SSL/TLS record layer has a maximum record size, a
>> certificate pr
That was it. One @ 13k works and one @18k doesn't. Thanks Victor.
Ron
Victor Duchovni wrote:
>
> On Wed, Feb 10, 2010 at 03:23:03PM -0800, rono16 wrote:
>
>>
>> I am using OpenSSL to create a self sign certificate and have a need to
>> add
>> app
I am using OpenSSL to create a self sign certificate and have a need to add
approximately 4000, yes 4000, DNS entries (don't ask why) using Subject
Alternative Name. I have succeeded in creating a certificate with 500 DNS
entries and it works just fine with no noticeable latency accessing the web