error on self-/usr/bin/openssl req -x509 -newkey rsa -out cacert.pem -outform PEM Using configuration from /home/jose/exampleca/openssl.cnf Generating a 1024 bit RSA private key .....++++++ .................................++++++ writing new private key to '/home/jose/exampleca/private/cakey.pem' Enter PEM pass phrase:jose Verifying password - Enter PEM pass phrase:jose ----- problems making Certificate Request 4370:error:0D11A0A3:asn1 encodisigned root certificate

[Jose Gonzalez]

Hi,

I am using version 0.9.7Beta3 with a locally created configuration file
to generate a self-signed root certificate. On a RH-7.2 Linux Sytem.
The install and test of this version of code had no erros reported. Up
on issue the following
command:

/usr/bin/openssl req -x509 -newkey rsa -out cacert.pem -outform PEM
Using configuration from /home/jose/exampleca/openssl.cnf
Generating a 1024 bit RSA private key
.....++++++
.................................++++++
writing new private key to '/home/jose/exampleca/private/cakey.pem'
Enter PEM pass phrase:jose

Verifying password - Enter PEM pass phrase:jose

-----
problems making Certificate Request
4370:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too
long:a_mbstr.c:154:maxsize=2

Any Ideas of what maybe wrong?

Thanks

Jose
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org

[Dr. Stephen Henson]

Post by Jose Gonzalez
Hi,
I am using version 0.9.7Beta3 with a locally created configuration file
to generate a self-signed root certificate. On a RH-7.2 Linux Sytem.
The install and test of this version of code had no erros reported. Up
on issue the following
/usr/bin/openssl req -x509 -newkey rsa -out cacert.pem -outform PEM
Using configuration from /home/jose/exampleca/openssl.cnf
Generating a 1024 bit RSA private key
.....++++++
.................................++++++
writing new private key to '/home/jose/exampleca/private/cakey.pem'
Enter PEM pass phrase:jose
Verifying password - Enter PEM pass phrase:jose
-----
problems making Certificate Request
4370:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too
long:a_mbstr.c:154:maxsize=2
Any Ideas of what maybe wrong?

You've exceeded one of the field length limits: their length
is set by various standards and they are checked to avoid
creating invalid requests.

Since its a limit of 2 I'd guess its the country name it doesn't like.

Steve.
--
Dr. Stephen Henson steve-MCmKBN63+***@public.gmane.org
OpenSSL Project http://www.openssl.org/~steve/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org

[Jose Adalberto Gonzalez]

Thank you Steve, I made the usggested change and it now works.

Jose.

----- Original Message -----
From: "Dr. Stephen Henson" <steve-MCmKBN63+***@public.gmane.org>
To: <openssl-users-MCmKBN63+***@public.gmane.org>
Sent: Thursday, August 08, 2002 5:21 PM
Subject: Re: error on self-/usr/bin/openssl req -x509 -newkey rsa -out
cacert.pem -outform PEM Using configuration from
/home/jose/exampleca/openssl.cnf Generating a 1024 bit RSA private key
.....++++++ .................................++++++ writing new private key
to '/home/jose/exampleca/private/cakey.pem' Enter PEM pass phrase:jose
Verifying password - Enter PEM pass phrase:jose ----- problems making
Certificate Request 4370:error:0D11A0A3:asn1 encodisigned root certificate

Post by Dr. Stephen Henson

Post by Jose Gonzalez
Hi,
I am using version 0.9.7Beta3 with a locally created configuration file
to generate a self-signed root certificate. On a RH-7.2 Linux Sytem.
The install and test of this version of code had no erros reported. Up
on issue the following
/usr/bin/openssl req -x509 -newkey rsa -out cacert.pem -outform PEM
Using configuration from /home/jose/exampleca/openssl.cnf
Generating a 1024 bit RSA private key
.....++++++
.................................++++++
writing new private key to '/home/jose/exampleca/private/cakey.pem'
Enter PEM pass phrase:jose
Verifying password - Enter PEM pass phrase:jose
-----
problems making Certificate Request
4370:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too
long:a_mbstr.c:154:maxsize=2
Any Ideas of what maybe wrong?

You've exceeded one of the field length limits: their length
is set by various standards and they are checked to avoid
creating invalid requests.
Since its a limit of 2 I'd guess its the country name it doesn't like.
Steve.
--
OpenSSL Project http://www.openssl.org/~steve/
______________________________________________________________________
OpenSSL Project http://www.openssl.org

______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org