1.4.0 Cannot open DB

I cannot trigger the problem here.
Can you provide a database without sensible data that shows the issue?

Also experiencing this issue.

I am uncertain if it is related, but I have a large database - approximately 1MB.

I am affected, too.

Not related to size;
I could reproduce the problem with only one certificate, its private key and its authority certificate. I cannot send it since it contains sensible data. Doing some more tests.

I'm getting the same error on Windows 7, opening a DB created with the previous version of XCA with a file size of 113kb.

I'll try to create a dummy DB for you shortly.

Re-creating this problem in a new file is a bit of a challange. Here's what I've tried so far in case it helps without a sample file.

Using version 1.3.2 I've tried creating a new XDB file, creating test CAs, CSRs, etc. with no luck in reproducing the error. I've tried importing all sorts of certificates from various locations and sources with no luck.

If I copy the entire list of certificates from my normal XDB file to the clipboard (Export/Clipboard) and then import it to a new XDB file (Paste PEM data), this file will give the error with 1.4.0 but the line "error:0D0E10DF:asn1 encoding routines:asn1_get_uint64:too large" only appears once. Trying to open my real XDB file with 1.4.0 gives me that error about 7 times.

Since I don't want to share the entire certificate list, I'd open this test XDB file with 1.3.2, remove 3 certificates and attempted to open it in 1.4.0. I'd repeat this process until 1.4.0 opens the file. At that point, I'd try copying just the 3 certificates into a new XDB file but 1.4.0 would still open the new XDB. I'd start this process over again but would first remove the 3 certificates that allowed 1.4.0 to open the XDB. Version 1.4.0 still would not open the XDB and eventually it was a different set of 3 certificates that once removed, 1.4.0 would open.

Anyways, I'm still trying to get a file to post here to show the problem.

Hello,

i created a 1.4.1-pre01 version downloadable at https://hohnstaedt.de/downloads/
It should give better error location information.
Please test it and report any error message. Thank you.

No changes in the error message for me with the 1.4.1pre01 version.

The following error occurred:
(pki_x509:)
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large
error:0D0E00DF:asn1 encoding routines:asn1_get_int64:too large

(pki_x509.cpp:60)

Fixed in XCA 1.4.1 with

commit 365507b36e0633a6f978e632f97a0cdaca6b4dde
Author: Christian Hohnstaedt christian@hohnstaedt.de
Date: Thu Mar 1 22:06:23 2018 +0100

SF Bug #122 isValid() tried to convert the serial to 64 bit

With OpenSSL 1.1.0 this results in an error message
if the serial was too long.
With OpenSSL 1.0.x it didn't.