Bill,

pfSense - Ticket #635

It's done ;)

jonathan



Bill Marquette wrote:
If you haven't already, please file this as a bug in cvstrac (I'd like
to have something to track for the fix and the MFC).  Thanks

--Bill

On 10/24/05, jonathan gonzalez <[EMAIL PROTECTED]> wrote:

Hi group,

i have detected an error in the generation of the web certificate for
pfSense.

This error is something internal that only applies to the fields that
openssl processes to generate a PEM file (certificate + private key),
the file (certificate) that is used to access via SSL pfSense and for
the captive portal while running with HTTPS enabled.

A normal certificate like this includes the following fields:

CN, OU, O, L, ST, C

In this case the certificate that is generated using pfSense has a
duplicate entry for the country field ( C ).

An example of mine:

C = US
CN = pfsense
OU = security
O = surestorm.com
L = gijon
ST = asturias
C = es

As you can see the first 'C' entry and it's value shouldn't be there.

You can check your certificates taking a deep inspection in the Issuer,
Subject and Authority Key Identifier fields of the certificate properties.

I hope this can be fixed in future releases.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to