Hello! I'm catch error of cryptoapy when certificate cn length is 29 symbols. (Doesn't mean if I use subj or SUBJ). May it some restriction of length of openssl\openvpn\ms crypto api or it some error with certificcate on eToken?
BR Ivan Mastrenko
On Wed, Dec 20, 2017 at 04:46:28PM +0000, Мастренко Иван wrote:
Hello! I'm catch error of cryptoapy when certificate cn length is 29 symbols. (Doesn't mean if I use subj or SUBJ). May it some restriction of length of openssl\openvpn\ms crypto api or it some error with certificcate on eToken?
Can you give a bit more details where you see the error and what kind of operation is currently going on?
bye, Sumit
BR Ivan Mastrenko _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
I'm trying to connect with certificate and key on eToken. Client log is: Wed Dec 20 20:35:39 2017 OpenSSL: error:C5065064:microsoft cryptoapi:CertFindCertificateInStore: Cannot find object or property. Wed Dec 20 20:35:39 2017 MANAGEMENT: Client disconnected Wed Dec 20 20:35:39 2017 Cannot load certificate "SUBJ:xxxxxxxxxxxxxxxxxxxxxx" from Microsoft Certificate Store Wed Dec 20 20:35:39 2017 Exiting due to fatal error
I'm trying to connect by subj, next by thumb, and both ways generates this error.
-----Original Message----- From: Sumit Bose [mailto:sbose@redhat.com] Sent: Wednesday, December 20, 2017 7:59 PM To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Re: eToken CN Lenght
On Wed, Dec 20, 2017 at 04:46:28PM +0000, Мастренко Иван wrote:
Hello! I'm catch error of cryptoapy when certificate cn length is 29 symbols. (Doesn't mean if I use subj or SUBJ). May it some restriction of length of openssl\openvpn\ms crypto api or it some error with certificcate on eToken?
Can you give a bit more details where you see the error and what kind of operation is currently going on?
bye, Sumit
BR Ivan Mastrenko _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
_______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
sssd-users@lists.fedorahosted.org