Hey there,

Just stumbled across this today. I tried to create a certificate for testing 
purposes with a 63 byte domain name:
thelongestdomainnameintheworldandthensomeandthensomemoreandmore.com -- (which 
for the record, does exist heh...)

However, because openssl is taking the TLD label, including the dot in .com 
into account (in addition to the ridiculously long domain name), the domain 
exceeds the 64 character limit, resulting in the following message:

string is too long, it needs to be less than  64 bytes long

In theory, that particular domain name should be supported. In practice, only 
domains up to 61 characters are supported by OpenSSL 1.0.0-fips 29 Mar 2010.

While this is probably not super high priority, I would be remised if I did not 
mention it.

Thanks!
Justin Schaefer
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to