[rabbitmq-discuss] SSL Certificate Error

[Emile Joubert]

Hi James,

On 08/05/12 16:50, james.poole at rsa.com wrote:
> Signs are pointing to this being an issue with OpenSSL.  If I try to manually 
> create a cert with OpenSSL using a subject of length greater than 64, it 
> fails:

Thanks for making me aware of this. RFC3280 and RFC5280 confirms the 64
character limit. It would appear that the standards prevent you creating
subjects that are any longer than 64 characters.

> Our certificates where we were seeing the issue were created with another tool 
> (not OpenSSL) which didn't have this restriction.

The other tool is in violation of the spec! I would suggest adhering to
the spec for the best chance of interoperability.


-Emile