Problems making certificate request

[jkarttunen]

When running ./setup.sh, i get

Generating RSA private key, 2048 bit long modulus
..................................................+++
.....................................+++
e is 65537 (0x10001)
+ openssl req -sha256 -new -key key.pem -out csr.pem -config server-config
problems making Certificate Request
140529749358232:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1

[davidmoten]

I had this recently on another project. It is fixable in the script (contribution welcome) but the cause is that a too long domain name is being requested and it has to go in the Alt Subject field of the certificate instead! I'll have a look at another script that I fixed recently (unrelated to this jenkins project) and let you know.

…

On 31 August 2017 at 05:36, Juha Karttunen ***@***.***> wrote: When running ./setup.sh, i get Generating RSA private key, 2048 bit long modulus ..................................................+++ .....................................+++ e is 65537 (0x10001) + openssl req -sha256 -new -key key.pem -out csr.pem -config server-config problems making Certificate Request 140529749358232:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AATa62xRVVkUWUg76UiKRhXiJ5dWLeZlks5sdbmigaJpZM4PH3yR> .

[davidmoten]

Ah wait you got the string too short error. Make sure you have all the fields filled in and retry.

…

On 31 August 2017 at 08:10, Dave Moten ***@***.***> wrote: I had this recently on another project. It is fixable in the script (contribution welcome) but the cause is that a too long domain name is being requested and it has to go in the Alt Subject field of the certificate instead! I'll have a look at another script that I fixed recently (unrelated to this jenkins project) and let you know. On 31 August 2017 at 05:36, Juha Karttunen ***@***.***> wrote: > When running ./setup.sh, i get > > Generating RSA private key, 2048 bit long modulus > ..................................................+++ > .....................................+++ > e is 65537 (0x10001) > + openssl req -sha256 -new -key key.pem -out csr.pem -config server-config > problems making Certificate Request > 140529749358232:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:a_mbstr.c:151:minsize=1 > > — > You are receiving this because you are subscribed to this thread. > Reply to this email directly, view it on GitHub > <#1>, or mute the > thread > <https://github.com/notifications/unsubscribe-auth/AATa62xRVVkUWUg76UiKRhXiJ5dWLeZlks5sdbmigaJpZM4PH3yR> > . >

[davidmoten]

Closing because of inactivity.

[srinivas0v]

hello david,
I tried to run the setup.sh and got the same error. So what's the fix for this error? I really appreciate you if you could help me with this problem.

Thank you

[davidmoten]

Hi, my googling suggests this happens when you don't specify one of the fields in the block at the top of setup.sh. Don't leave ORG_UNIT blank for instance and perhaps make sure it has at least 2 characters.

I get this too.please your help
me@me:/opt/HighGo/Develop/bin$ ./createopenssl.sh
Generating a 2048 bit RSA private key
...........................+++
..+++
writing new private key to 'privkey.pem'

problems making Certificate Request
140466674001152:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:../crypto/asn1/a_mbstr.c:102:minsize=1
writing RSA key

[davidmoten]

@liguangxian
What did you put in this block in setup.sh?:

HOSTNAME='ec2-52-63-456-123.ap-southeast-2.compute.amazonaws.com'
COUNTRY='AU'
STATE='Australian Capital Territory'
CITY='Canberra'
ORG='MyCompany'
ORG_UNIT='IT'
EMAIL='somebody@gmail.com'

@davidmoten

first, thank you,this is my setup.sh

``#!/bin/bash

data="$1"

openssl req -nodes -days 1000000 -new -text -subj "/C=US/ST=Illinois/L=Chicago/O=IT/CN="${data} -out /opt/HighGo/Develop/data/server.req
openssl rsa -in privkey.pem -out /opt/HighGo/Develop/data/server.key
rm privkey.pem
openssl req -x509 -in /opt/HighGo/Develop/data/server.req -text -key /opt/HighGo/Develop/data/server.key -out /opt/HighGo/Develop/data/server.crt
chown -R $LOGNAME /opt/HighGo/Develop/data/server.key /opt/HighGo/Develop/data/server.crt /opt/HighGo/Develop/data/server.req
chmod 600 /opt/HighGo/Develop/data/server.key``

[davidmoten]

You need an OU entry as well

[rknell]

It was org unit blank that did it for me

[gjs68]

also check in openssl.cnf what the default max setting is,
(ran into a Country > 2 characters requirement issue, producing a similar error)

[snydergd]

For me it was that one of the values started with a "#" and was not quoted. This commented out the remainder of the line and value. It was a stupid mistake, but surrounding this value in quotes resolved that issue easy enough.