How to get rid of LuCI HTTPS certificate warnings

after point 6. in Create & Install
the info is:

root@OpenWrt:~# cd /etc/ssl
root@OpenWrt:/etc/ssl# openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout mycert.key -out mycert.crt -config my
Generating a RSA private key
writing new private key to 'mycert.key'
problems making Certificate Request
3070133600:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:crypto/asn1/a_mbstr.c:107:maxsize=2

there is no mycert.crt
who can help
Thank you

it was unable to create the cert due to an error:

there must be an error in your not attached myconfig.conf file: one of the parameters you gave in the config file violates the config file schema.

1 Like

Hi Pico,
this is the myconfig.conf

    distinguished_name  = req_distinguished_name
    x509_extensions     = v3_req
    prompt              = no
    string_mask         = utf8only

    C                   = GER
    ST                  = NRW
    L                   = SomeCity
    O                   = OpenWrt
    OU                  = AVM FRITZ!Box 4040
    CN                  = luci.openwrt

    keyUsage            = nonRepudiation, digitalSignature, keyEncipherment
    extendedKeyUsage    = serverAuth
    subjectAltName      = @alt_names

    DNS.1               = luci.openwrt
    IP.1                =

what's wrong?
Thank you

The country name must be two letter code.

1 Like

Hi pavelgl and vagaetera,

Thank you very mutch!
I've changed GER to DE and i's O.K.

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.