Ejbca 3.8.1 Subject Alternative Name (dNSName)

[Pablitos3]

Hello,

I need to issue a certificate with 15 SAN entry (for a lenght of about 500 chars), but when i create an end entity on the adminweb application, I can not specify more than 255 chars on the Dns name field of SAN. I thought that adding one more Dns name field under SAN may work (in order to put 255 chars on one field and 255 on the other field), but I get the following error:

org.jboss.tm.JBossTransactionRolledbackLocalException: - nested throwable: (javax.transaction.RollbackException: [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] Can't commit because the transaction is in aborted state) : - nested throwable: (javax.transaction.RollbackException: [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] Can't commit because the transaction is in aborted state)

ejbca is in production and runs on mysql DB.

Is there any way to issue a certificate with more than 255 chars for Dns name of SAN?
Thanks for any help you colud provide.
Pablitos

[Tomas Gustavsson]

Hi,

there is a simple solution to this issues. In the database there is a
table UserData, with a column called subjectAltName. You can easily
alter this column and change it from varchar(250) to text.
After this you can create long long long altanmes.

Regards,
Tomas


Pablitos3 wrote:

> Hello,
>
> I need to issue a certificate with 15 SAN entry (for a lenght of about 500
> chars), but when i create an end entity on the adminweb application, I can
> not specify more than 255 chars on the Dns name field of SAN. I thought that
> adding one more Dns name field under SAN may work (in order to put 255 chars
> on one field and 255 on the other field), but I get the following error:
>
> org.jboss.tm.JBossTransactionRolledbackLocalException: - nested throwable:
> (javax.transaction.RollbackException:
> [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted]
> [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] Can't
> commit because the transaction is in aborted state) : - nested throwable:
> (javax.transaction.RollbackException:
> [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted]
> [com.arjuna.ats.internal.jta.transaction.arjunacore.commitwhenaborted] Can't
> commit because the transaction is in aborted state)
>
> ejbca is in production and runs on mysql DB.
>
> Is there any way to issue a certificate with more than 255 chars for Dns
> name of SAN?
> Thanks for any help you colud provide.
> Pablitos

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Ejbca-develop mailing list
Ejbca-develop@...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop