openssl req error with DN having a / in it

Jordan Brown openssl at jordan.maileater.net
Wed Aug 14 22:33:23 UTC 2019


On 8/14/2019 2:11 PM, Robert Moskowitz wrote:
> [...]
>    commonName="/CN=IPv6::2001:24:28:24/64"
> [...]
> req: Hit end of string before finding the equals.
> problems making Certificate Request 

Some systems present distinguished names using slashes as separators.  I
assume that that's what you're running into here, that your string is
being processed as a valid RDN "CN=IPv6::2001:24:28:24" and an invalid
RDN "64".

You'll need to quote the slash.  I don't happen to know how, but my bet
would be either \/ or %2F.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190814/c41d8f97/attachment.html>


More information about the openssl-users mailing list