Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

missing option exclude_cn_from_sans when requesting a signed certificate #244

Open
darkedges opened this issue May 28, 2021 · 0 comments
Open

Comments

@darkedges
Copy link

darkedges commented May 28, 2021

I have discovered that when I use a CSR with a SubjecDN greater than 63 characters in length it throws the following

idna: invalid label "UID=f0486469-6aa7-4a93-8cc2-3e64f30e1789,CN=Nicholas Peter Irving"

I have raised an issue
hashicorp/vault#11721
to get this looked at, how I have noticed that i can disabled this check through the UI by using the Sign Verbatim option.

This adds an additional parameter in the request to /sign

    exclude_cn_from_sans: false

Is this something that looks like we can add?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant