Cisco Bug: CSCuj28351 - ISE complains about DN length when the problem is the format
Jun 08, 2016
- Cisco Identity Services Engine
Known Affected Releases
Symptom: ISE throws "CSR generation failed" with "Invalid certificate subject DN length" when you create a CSR on ISE ISE should throw a more meaningful error and say what was wrong. Conditions: It happens not necessarily when the whole subject is too long but if the format is wrong also For example if you enter "C=Belgium" instead of "C=BE", you will get this error. State and country are 2 certificates field that requires code letters and not full name.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases