Error creating new authz :: Invalid character in DNS name #246

Closed
opened 2025-12-29 01:20:11 +01:00 by adam · 0 comments
Owner

Originally created by @sven3 on GitHub (Aug 17, 2017).

OpenSSL 1.1 (included in current Debian stable) uses a different spacing output format (at least) for the CSR's subject. When requesting a certificate without SAN using a CSR, this leads to a blank CN being requested.

With OpenSSL 1.0:
Subject: DC=org, DC=myorganization, CN=www.my.org

With OpenSSL 1.1:
Subject: DC = org, DC = myorganization, CN = www.my.org

The attached patch fixes this.

dehydrated.patch.txt

Originally created by @sven3 on GitHub (Aug 17, 2017). OpenSSL 1.1 (included in current Debian stable) uses a different spacing output format (at least) for the CSR's subject. When requesting a certificate without SAN using a CSR, this leads to a blank CN being requested. With OpenSSL 1.0: Subject: DC=org, DC=myorganization, CN=www.my.org With OpenSSL 1.1: Subject: DC = org, DC = myorganization, CN = www.my.org The attached patch fixes this. [dehydrated.patch.txt](https://github.com/lukas2511/dehydrated/files/1231288/dehydrated.patch.txt)
adam closed this issue 2025-12-29 01:20:12 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#246