Forum Discussion
NimbostratusCertificate alternate subject names truncated at 255 characters
I need to be able to verify whether a certificate covers a specific subject. But I run into scenarios where the alternate subjects are long and the iControl API truncates them at 255 characters. The BIGIP UI does the same thing but I assumed it was just being truncated for display purposes but it seems it is the actual underlying functionallity. Is this a known limitation of the iControl java API?
I've seen some other references to 255 characters but not specific to the String value results of iControl 'get' routines. Maybe I missed this limitation. If the API can't handle the actual result of a 'get' routine it seems like it should return an error of some kind not truncated results.
2 Replies
Arnaud_LemaireEmployee
The maximum length of a DNS name is 255 octets. This is spelled out in RFC 1035 section 2.3.4
2.3.4. Size limits Various objects and parameters in the DNS have size limits. They are listed below. Some could be easily changed, others are more fundamental.
labels 63 octets or less
names 255 octets or less
TTL positive values of a signed 32 bit number.
UDP messages 512 octets or less
- nitass
what version are you running? can you try 11.4.0 or later?
