How to get rid of LuCI HTTPS certificate warnings

Installing and Using OpenWrt
1

Hi,
after point 6. in Create & Install
the info is:

root@OpenWrt:~# cd /etc/ssl
root@OpenWrt:/etc/ssl# openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout mycert.key -out mycert.crt -config my
config.conf
Generating a RSA private key
.................+++++
.........................+++++
writing new private key to 'mycert.key'
-----
problems making Certificate Request
3070133600:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:crypto/asn1/a_mbstr.c:107:maxsize=2
root@OpenWrt:/etc/ssl#

there is no mycert.crt
who can help
Thank you

2

it was unable to create the cert due to an error:

there must be an error in your not attached myconfig.conf file: one of the parameters you gave in the config file violates the config file schema.

1 Like
3
4

Hi Pico,
this is the myconfig.conf

    [req]
    distinguished_name  = req_distinguished_name
    x509_extensions     = v3_req
    prompt              = no
    string_mask         = utf8only

    [req_distinguished_name]
    C                   = GER
    ST                  = NRW
    L                   = SomeCity
    O                   = OpenWrt
    OU                  = AVM FRITZ!Box 4040
    CN                  = luci.openwrt

    [v3_req]
    keyUsage            = nonRepudiation, digitalSignature, keyEncipherment
    extendedKeyUsage    = serverAuth
    subjectAltName      = @alt_names

    [alt_names]
    DNS.1               = luci.openwrt
    IP.1                = 192.168.200.1

what's wrong?
Thank you

5

The country name must be two letter code.

2 Likes
6
1 Like
7

Hi pavelgl and vagaetera,

Thank you very mutch!
I've changed GER to DE and i's O.K.

1 Like
8

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.