"error:0D07A097" issued when creating Sample SSL certificates for XCOM

Products

• XCOM Data Transport
• XCOM Data Transport - Windows
• XCOM Data Transport - Linux PC
• XCOM Data Transport - z/OS

Issue/Introduction

When generating SSL certificates using XCOM supplied sample scripts (makeca, makeclient, makeserver) you can get "error:0D07A097"

The message you get looks like:

Problem making Certificate Request
4004:error:0D07A097:asn1 encoding routines: ASN 1_mbstring-copy:string too long:.\cyryptoasn1\a-mbstr.c:154:maxsize=2.

 

Environment

Release:  11.6, 12.0
Component: XCOM 

Cause

If the countryName-value in the .conf-file's distinguished name section is a string other than exactly 2 characters long you will get this error, because what the openssl certificate-building routine expects here is an ISO country code. For every country, ISO -3166 defines a 2-char country code (see the links below).

Resolution

Specify a countryName value in the format of a 2 character ISO country code

http://www.iso.org/iso/country_codes

http://en.wikipedia.org/wiki/ISO3166