国家代码为2个字母时,使用openssl创建证书并抛出“ maxsize”错误

时间:2019-10-08 21:59:21

标签: ubuntu openssl ubuntu-18.04

运行

 
    <div class='container'> 
        <div id='main_menu'>
            <div class='logo_area'>
                <a href='#'><img src='img/cabear.jpg' alt='CA state bear'></a>
            </div>

            <div class='inner_main_menu'>
                <ul>
                    <li><a href='#'>About</a></li>
                    <li><a href='#'>Pricing</a></li>
                </ul>
            </div>
        </div> 

        <img id='dLand' src='http://placehold.it/300x450/fa0' alt='Disneyland, CA' style='width: 40%'>
        <img id='sunset' src='http://placehold.it/300x450/0fa' alt='Sunset Strip' style='width: 40%'>
        <img id='griff' src='http://placehold.it/300x450/f0a' alt='Griffith Observatory' style='width: 40%'>
        <img id='samo' src='http://placehold.it/300x450/a0f' alt='Santa Monica Pier' style='width: 40%'>

    </div>

使用包含

的mokconfig.cnf
openssl req -config ./mokconfig.cnf \
        -new -x509 -newkey rsa:2048 \
        -nodes -days 36500 -outform DER \
        -keyout "MOK.priv" \
        -out "MOK.der"

哪个返回此错误

# This definition stops the following lines failing if HOME isn't
# defined.
HOME                    = .
[ req ]
distinguished_name      = req_distinguished_name
x509_extensions         = v3
string_mask             = utf8only
prompt                  = no

[ req_distinguished_name ]
countryName             = <US>
stateOrProvinceName     = <Idaho>
localityName            = <Boise>
0.organizationName      = <Development>
commonName              = Secure Boot Signing Key
emailAddress            = <*MYEMAIL*>

[ v3 ]
subjectKeyIdentifier    = hash
authorityKeyIdentifier  = keyid:always,issuer
basicConstraints        = critical,CA:FALSE
extendedKeyUsage        = codeSigning,1.3.6.1.4.1.311.10.3.6
nsComment               = "OpenSSL Generated Certificate"

基于我可以收集的信息和我研究的内容,这是指具有maxsize = 2的国家/地区代码。如您在配置文件中看到的,国家/地区代码为“ US”,即2个字符。

Ubuntu 18.04.3

我肯定想念一些东西,但看不见,需要帮助

谢谢前进

1 个答案:

答案 0 :(得分:0)

删除国家/地区代码中的<>