OpenVPN Client - verify-X509-name - String Length

BazRat24

We are having a problem with the OpenVPN client as it doesn't seem to like the length of the string for our 'verify-x509-name'.

As soon as the string goes above 235 characters the OpenVPN client refuses to try and connect. Our X509 name is 247 characters long and can't be changed. The only work around we have found so far is to remove the 'verify-x509-name' from the config. This obviously adds additional headache as we have to remember to remove it and the client complains due to it not checking the cert name.

Any ideas how this can be resolved?

TinCanTech

BazRat24 wrote Our X509 name is 247 characters long and can't be changed

Because --verify-x509-name has never worked for your name you may have to change it ..

It does appear to be a coded limitation and your X.509 name is beyond the length that openvpn will allow.
(although, that could be a constraint applied by openssl)

I suggest you direct your question to the Openvpn developers (on the usual channels)