Guest

Preview Tool

Cisco Bug: CSCuj28351 - ISE complains about DN length when the problem is the format

Last Modified

Jun 08, 2016

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

1.2(0.899)

Description (partial)

Symptom:
ISE throws "CSR generation failed" with "Invalid certificate subject DN length" when you create a CSR on ISE

ISE should throw a more meaningful error and say what was wrong.

Conditions:
It happens not necessarily when the whole subject is too long but if the format is wrong also
For example if you enter "C=Belgium" instead of "C=BE", you will get this error.
State and country are 2 certificates field that requires code letters and not full name.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.