On Sun, Jan 05, 2003 at 12:00:12AM +0000, Joel Ebrahimi wrote:

> I am having problems generating a certificate for nessus. I looked at the 
> eroor log and apparently it has to do with something with asn1. I have 
> tried several different things, like updaitng my openssl, compiling Nessus 
> from source rahter than the online install. I keep getting this error 
> listed below. I noticed this in earlier posts to this list but I am unable 
> to see a solution anywhere. Can someone tell me if there is a fix? Or any 
> ideas on what could be wrong. Also when you look at the error it says 
> string are too long, but none of my strings r long I have even tried to use 
> '.' for every field and it still gives me the same error.
...
> 3929:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too 
> long:a_mbstr.c:154:maxsize=64

There was a seemingly identical problem mentioned on the mailing list
late last month.  In the end, the person worked around it by generating
the certs directly using OpenSSL.

If you'd like to pursue the cause, what OS are you using and which
versions of OpenSSL have you tried? Also, when you run nessus-mkcert, it
creates a scratch directory - probably /tmp/nessus-mkcert.$$.  In that
directory, there should be a working copy of the openssl configuration
file; if you can see it, what does it contain? Also, do you see any
additional errors if you run sh -x nessus-mkcert?

George
-- 
[EMAIL PROTECTED]

Attachment: msg03210/pgp00000.pgp
Description: PGP signature

Reply via email to