Raise the generate_ssl.sh common name length limit

Author: aidangarske

can-bus/generate_ssl.sh

@@ -1,11 +1,17 @@
 #!/bin/sh
 
+# X.509 caps CN at 64 characters, and cloud hosts routinely have longer FQDNs
+CN=`hostname -f`
+if [ ${#CN} -gt 64 ]; then
+    CN=`hostname`
+fi
+
 # Generate self signed root CA cert
-openssl req -nodes -x509 -newkey rsa:2048 -keyout ca.key -out ca.crt -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=root/CN=`hostname -f`/emailAddress=info@wolfssl.com"
+openssl req -nodes -x509 -newkey rsa:2048 -keyout ca.key -out ca.crt -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=root/CN=$CN/emailAddress=info@wolfssl.com"
 
 
 # Generate server cert to be signed
-openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=server/CN=`hostname -f`/emailAddress=info@wolfssl.com"
+openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=server/CN=$CN/emailAddress=info@wolfssl.com"
 
 # Sign the server cert
 openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
@@ -15,7 +21,7 @@ cat server.key server.crt > server.pem
 
 
 # Generate client cert to be signed
-openssl req -nodes -newkey rsa:2048 -keyout client.key -out client.csr -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=client/CN=`hostname -f`/emailAddress=info@wolfssl.com"
+openssl req -nodes -newkey rsa:2048 -keyout client.key -out client.csr -subj "/C=GB/ST=London/L=Lon1/O=wolfSSL/OU=client/CN=$CN/emailAddress=info@wolfssl.com"
 
 # Sign the client cert
 openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAserial ca.srl -out client.crt