You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@slider.apache.org by "Gour Saha (JIRA)" <ji...@apache.org> on 2018/02/21 01:20:00 UTC

[jira] [Commented] (SLIDER-1261) CSR creation fails for long hostnames greater than 64 chars

    [ https://issues.apache.org/jira/browse/SLIDER-1261?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16370824#comment-16370824 ] 

Gour Saha commented on SLIDER-1261:
-----------------------------------

Looks like the recommended value for CN is the domainname rather than the FQDN. Hence stripping out the hostname and leaving the rest will provide a few extra chars. Note, if the domainname is more than 64 chars long, then this issue can still occur.

> CSR creation fails for long hostnames greater than 64 chars
> -----------------------------------------------------------
>
>                 Key: SLIDER-1261
>                 URL: https://issues.apache.org/jira/browse/SLIDER-1261
>             Project: Slider
>          Issue Type: Bug
>          Components: appmaster
>    Affects Versions: Slider 0.92
>            Reporter: Gour Saha
>            Priority: Major
>
> In Azure we have seen CSR creation fail because of hostnames longer than 64 chars -
> {code:java}
> 2018-02-14 15:57:21,896 [Thread-24] INFO  security.CertificateManager - problems making Certificate Request
> 2018-02-14 15:57:21,896 [Thread-24] INFO  security.CertificateManager - 140223026857888:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:158:maxsize=64
> 2018-02-14 15:57:21,896 [main] WARN  security.SecurityUtils - Command openssl req -passin pass:**** -new -key /tmp/sec1518623841372/security/ca.key -out /tmp/sec1518623841372/security/ca.csr -config /tmp/sec1518623841372/security/ca.config -subj /CN=azure-cluster-c0.k4kldeirxsoutbyybgqoiqdsgg.fx.internal.cloudapp.net/OU=container_1518623123591_0008_02_000001/OU=llap0 -batch was finished with exit code: 1 - an error occurred parsing the command options.
> .......
> End of LogType:slider.log
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)