On 12/9/07, badeguruji <[EMAIL PROTECTED]> wrote:
> Hello,
>
> although i have setup the default country_code to 2 characters only ("US"). I
> was not able to find out why, am i getting below error, while trying to setup
> my own CA:
>
> # openssl req -new -x509 -extensions v3_ca -keyout private/cakey.pem -out
> cacert.pem
>
> Generating a 2048 bit RSA private key
> ..+++
> .........................................................................................+++
> writing new private key to 'private/cakey.pem'
> Enter PEM pass phrase:
> Verifying - Enter PEM pass phrase:
> -----
> problems making Certificate Request
> 13175:error:0D07A097:asn1 encoding routines:ASN1_mbstring_copy:string too
> long:/usr/src/lib/libssl/src/crypto/asn1/a_mbstr.c:154:maxsize=2
> #
>
>
> here is my config file:
....
> [ req_distinguished_name ] # options needed to
> generate a certificate
> # Variable name Prompt string
> #-------------------------
> ----------------------------------
> countryName = Country Name (2 letter code)
> countryName_min = 2
> countryName_max = 2
^ your country name is not set to 'US' like you think it is?
-Nick
