[GH-ISSUE #458] [BUG] Couldn't generate Proxyman Certificate due to long name #456

Open
opened 2026-03-03 19:18:57 +03:00 by kerem · 1 comment
Owner

Originally created by @NghiaTranUIT on GitHub (Mar 29, 2020).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/458

Originally assigned to: @NghiaTranUIT on GitHub.

Description

Thanks to Pierre to help me to get the error log when he couldn't generate the certificate on his machine.

Generating RSA private key, 2048 bit long modulus
...............................................................................................................+++++..+++++
e is 65537 (0x10001)\nproblems making Certificate Request
4702391744:error:0DFFF097:asn1 encoding routines:CRYPTO_internal:string too long:asn1/a_mbstr.c:156:maxsize=64\n"))

After investigating, it turns out that the CommonName must be lesser than 64 char. Proxyman would get the computer name and put it as a part of the Common Name. Thus, in some cases, the name is long and result in the OpenSSL error.

After he shortens the name, it works as expected 👍

Acceptance Criteria

  • Reproduce and trim the text if it's too long
  • Double-check if the name is non-ASCII char
Originally created by @NghiaTranUIT on GitHub (Mar 29, 2020). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/458 Originally assigned to: @NghiaTranUIT on GitHub. ### Description Thanks to Pierre to help me to get the error log when he couldn't generate the certificate on his machine. ``` Generating RSA private key, 2048 bit long modulus ...............................................................................................................+++++..+++++ e is 65537 (0x10001)\nproblems making Certificate Request 4702391744:error:0DFFF097:asn1 encoding routines:CRYPTO_internal:string too long:asn1/a_mbstr.c:156:maxsize=64\n")) ``` After investigating, it turns out that the CommonName must be lesser than 64 char. Proxyman would get the computer name and put it as a part of the Common Name. Thus, in some cases, the name is long and result in the OpenSSL error. After he shortens the name, it works as expected 👍 ### Acceptance Criteria - Reproduce and trim the text if it's too long - Double-check if the name is non-ASCII char
Author
Owner

@NghiaTranUIT commented on GitHub (Mar 29, 2020):

Done 🌮

Beta build: https://s3.console.aws.amazon.com/s3/object/proxyman/beta/Proxyman_1.20.0_Fix_Generate_Certificate_Error.dmg?region=us-east-2&tab=overview

Changelog

  • Trim the Common Name of the certificate if it exceeds 64 char
<!-- gh-comment-id:605555392 --> @NghiaTranUIT commented on GitHub (Mar 29, 2020): Done 🌮 Beta build: https://s3.console.aws.amazon.com/s3/object/proxyman/beta/Proxyman_1.20.0_Fix_Generate_Certificate_Error.dmg?region=us-east-2&tab=overview ### Changelog - Trim the Common Name of the certificate if it exceeds 64 char
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#456
No description provided.