Hello Ivo,

The portal and the web admin look for that file 
/usr/local/pf/conf/ssl/server.pem

It should contain the private key encrypted, the public certificate and the 
intermediate if needed.

The PKI is stored in the DB, right now we don’t provide any way to wipe 
everything out from the web admin. You can connect to the DB and use mysql 
command to wipe the tables/ certificates.

mysql -u $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{user}') -p$(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{pass}') -h $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{host}') pf

delete from tableName;

pki_cas                      
pki_certs                    
pki_profiles                 
pki_revoked_certs

Thanks,

Ludovic Zammit
Product Support Engineer Principal

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On Sep 14, 2021, at 12:11 AM, Admin SielNet via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> Hello,
> 
> I would like you to use signed ssl certs. 
> For the portal and radius. 
> But not lets encrypt. 
> 
> The import in the admin portal under settings ssl certificates fails. 
> 
> Because a RSA key is expected. But I have certificates with an EC (Elliptic 
> Curve) key. 
> 
> Can I manually copy the certificates to the right location? 
> What is the right location?
> 
> How to make sure, that PF does not overwrite the certificates? Can I disable 
> the certificate management of PF?
> 
> Lastly, I created a PF PKI for testing, but I am not allowed to delete it. 
> How can I delete the PKI profile and the PKI itself?
> 
> Thank you and greetings,
> 
> Ivo Damjanovic 
> 
> 
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!FfHxL0wux1xceDzga5c8piD8c1eiuQeKNII1Kt15FIInsHAzMf_RSLti1OMptp92$
>  

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to