On Mon, Feb 10, 2003 at 09:08:44AM -0800, Shawn Saunders wrote:

> 1421:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too
> long:a_mbstr.c:154:maxsize=64

The hostname on that box is rather long, isn't it? If so, the problem
arises because the nessus-mkcert script adds the hostname to the string
"Certification Authority for " and uses that for the
organizationalUnitName when generating the certificate request.  I
believe the maximum length of that is 64 characters, by default. 

One quick work-around then would be to edit your script and globally
remove the strings " for $hostname"; there are two places it's actively
used - once with the certificate authority and another with the server
certificate. 

You may also be able to fix the problem by setting
organizationalUnitName_min and organizationalUnitName_max in the
nessus-mkcert script. 


George
-- 
[EMAIL PROTECTED]

Attachment: msg03551/pgp00000.pgp
Description: PGP signature

Reply via email to