Voucher Length

valshare

there is an error in the "# of Roll Bits". This must be 15 to leave room the place the magic initializer.

nabachi

Hi,

here are my setting. You must delete the old tickets and create new ones.

Regards, Valle

Hi Valle,

Thanks to you, i was able to generate 10 - 7 character long voucher :)

I was able to generate 7 character log vouchers with the default voucher configs from a fresh installation of pfsense 2.0. I had 20 character voucher's after i changed "character set" to 123456789.

Many Thanks & Kind Regards

klamath

@sandern:

Create a shorter private key and modify the roll/ticket/checksum bits accordingly.

My vouchers are 6 characters long.

explain how to do it, please!

sandern

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Sander

klamath

@sandern:

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Sander

Thanks!!!
works only with 31… i got error with 30!

"openssl genrsa 31 > key.private"

The vouchers is now with 7 characters length!

Work like a charm!!!
THANKS!!! THANKS!!! THANKS!!!

brunoguidone

@sandern:

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Sander

Sorry, can you explain better?
because it still doesn't work. I need to generate a voucher with 6 characters.

Thanks for help,
Bruno

wallabybob

What parameters did you try? What was the outcome?

How many characters do you have in your set of available characters for voucher codes?

brunoguidone

@wallabybob:

What parameters did you try? What was the outcome?

How many characters do you have in your set of available characters for voucher codes?

Hi Wallabybob
That's my configuration:
.
I tried all combinations and stays longer than 10 characters. Can you help me, please ?

Thanks,
Bruno

wallabybob

@brunoguidone:

Can you help me, please ?

I have not read the voucher handling code so I'm guessing. After reading this thread a few times I SUSPECT Sandern left out a step in his instructions: I suspect that the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page. Did you do that?

I suspect the default keys need to be replaced by shorter keys to produce a shorter length voucher code. Possibly a smaller magic number will also help.

brunoguidone

@wallabybob:

@brunoguidone:

Can you help me, please ?

I have not read the voucher handling code so I'm guessing. After reading this thread a few times I SUSPECT Sandern left out a step in his instructions: I suspect that the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page. Did you do that?

I suspect the default keys need to be replaced by shorter keys to produce a shorter length voucher code. Possibly a smaller magic number will also help.

Hi Wallabybob,
thank you so much !!! Its Works!! was really missing copy content to the correct fields.

Thanks,
Bruno

wallabybob

Thanks for reporting back.

rinx

Hello!

I have the same requirement as the topicstarter and I need to have vauchers with 6 sumbols.
I tried to follow instructions described in all replies.

run:

openssl genrsa 30 > key.private
openssl rsa -pubout < key.private >key.public

Used the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

deleted and recreated vouchers. Didn't work. Still have vouchers with 11 characters lenght.

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

Can you please explain me how to do it step by step?

Thanks in advance!

wallabybob

@rinx:

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

The pfSense shell commandopenssl genrsa 30 > key.privategenerates a new private key and writes it into file named key.private in the default path. The shell command```
openssl rsa -pubout < key.private >key.public


Copy and paste is recommended here so avoid making errors in manually copying the key to the voucher configuration page.

rinx

@wallabybob:

@rinx:

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

The pfSense shell commandopenssl genrsa 30 > key.privategenerates a new private key and writes it into file named key.private in the default path. The shell command```
openssl rsa -pubout < key.private >key.public
Copy and paste is recommended here so avoid making errors in manually copying the key to the voucher configuration page.

Thanks for clarification! That has worked and I have 5 characters vouchers now!
Cheers!

dirkche

I´m still unable to generate a lesser code.
After trying "openssl genrsa 30" with the openSSL Tool and copy/paste it on Captive Portal page, my Database is destroyed while generating voucher codes.
Following Error is displayed.
"CFG bad content in cfg file /var/etc/voucher.cfg"

Copy old rsa key back, database is still destroyed. So i have to restore my backup config.

Can someone write me a step by step list?

wallabybob

@dirkche:

Can someone write me a step by step list?

You apparently generated a private key. What did you use for the public key?

dirkche

Hi,

i used this:

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Here i used 31 instead of 30

I copied the wrong with "openssl genrsa 30"….. i meaned "openssl genrsa 31"

wallabybob

I have not experimented with shortening the voucher length and don't have a system on which I am prepared to experiment.

The public key depends on the private key. Both public and private keys are inputs to the voucher generation. If you attempt to generate vouchers with a "new" private key and an "old" public key you are likely to get "inconsistent" results because the two keys are not correctly related. In your post so far you have not mentioned generation of a new public key derived from your new private key nor have you mentioned providing such a key as input to the pfSense voucher generation page.

What are you wanting to achieve by changing things: shorter (how many characters?) length voucher codes?

dirkche

@wallabybob

i found in an another topic a how to for generating public/private keys with openSSL (http://www.openssl.org/).
I generated a private key and with it a public key and paste it on my captive portal page.

Using "openssl genrsa 30 > key.private" on command line of my pfsense, nothing happens!

wallabybob

@dirkche:

Using "openssl genrsa 30 > key.private" on command line of my pfsense, nothing happens!

What are you expecting to happen?

See my explanation of 26-Nov (or possibly 25-Nov, depending on your timezone).