Unable to create cert (v2.1-BETA1 built 2/5 20:22:25 EST 2013)

NW-Loki · Feb 7, 2013, 2:14 AM

Not sure if I am doing something wrong but when I try to create a new user certificate (or any certificate for that matter) it will not let me select a digest method. I searched and didn't find any already existing thread for this.

jimp · Feb 7, 2013, 1:24 PM

Can you update to a newer snapshot?
I can't reproduce that on a current snapshot, and though I don't recall seeing it on older snapshots either, it's possible some other adjustment to html caused it temporarily (someone is cleaning up a bunch of HTML code and submitting changes as they go…)

If it's not that, it may be something in a package you have installed.

NW-Loki · Feb 7, 2013, 3:09 PM

Upgraded to v2.1-BETA1 built 2/6 19:40:53 EST 2013 this morning and I still am unable to select digest algorithm when trying to create a cert from System > Cert. Manager > Certificates > Create an internal Certificate.

Only recent package change was an upgrade to the openvpn client export.

jimp · Feb 7, 2013, 3:28 PM

Are you on i386 or amd64?

jimp · Feb 7, 2013, 3:53 PM

I've updated several VMs here and I can't reproduce this on any of them.

The field is populated by a variable defined in /etc/inc/certs.inc and the only way I can see that field being blank is if that file is old or changed in some way so it doesn't get defined properly.

Any other errors in the system log?

Is this NanoBSD or a full install?

NW-Loki · Feb 7, 2013, 6:51 PM

This is a full install using the i386 builds.

jimp · Feb 7, 2013, 6:56 PM

Can you look in /etc/inc/certs.inc and see if this is on line 37?

$openssl_digest_algs = array("sha1", "sha224", "sha256", "sha384", "sha512");

That file should look like this:
https://github.com/bsdperimeter/pfsense/blob/master/etc/inc/certs.inc

Is OpenVPN Client Export the only package you have installed? Or are there any others?

NW-Loki · Feb 7, 2013, 8:18 PM

Line 37 is present exactly and I just updated it again to v2.1-Beta1 (i386) built on Thu Feb 7 07:21:31 EST 2013 and the missing digest algorithms are still not appearing.

The only installed packages are the client export for openvpn and pfblocker.

eri-- · Feb 7, 2013, 8:43 PM

I cannot reproduce this either.
Not sure what is happening on your setup but it works fine here.

jimp · Feb 7, 2013, 8:45 PM

Try clearing your browser's cache or using a different browser temporarily to see if it's a problem there.

NW-Loki · Feb 7, 2013, 9:17 PM

Tried on the most recent firefox, chrome, and IE10 with the same result.

flushed dns and arp tables just to be sure.

NW-Loki · Feb 8, 2013, 3:58 PM

I just updated it again to 2.1-BETA1 (i386) built on Fri Feb 8 05:38:00 EST 2013 FreeBSD 8.3-RELEASE-p5 and tried IE9 with and without compatibility mode.

Still no go.

jimp · Feb 9, 2013, 5:37 PM

Something must be different about how PHP is loading on your system since nobody else can reproduce it. Somehow the variable defined in the include file is just not making it through to the page. We've seen similar issues with globals in the past but not in the GUI that I recall, it's usually when things are called from the shell.

How much RAM does your system have? We do turn off some optimizations when running with very low amounts of RAM.

NW-Loki · Feb 9, 2013, 7:27 PM

System is running on this box:

http://www.newegg.com/Product/Product.aspx?Item=N82E16816101364

with 4 gigs of ram

NW-Loki · Feb 10, 2013, 6:49 PM

Upgraded to the latest snapshot and tried changing the look and feel to see if that might be the issue.

Still no change in the digest algo requirement in the cert manager.

jimp · Feb 11, 2013, 2:05 AM

Just committed something that might fix it, try with a new snap dated after this post (probably tomorrow's date)

NW-Loki · Feb 11, 2013, 2:27 PM

Updated to 2.1-BETA1 (i386) built on Sun Feb 10 22:04:57 EST 2013 and can now confirm that the Digest Algorithm's now display.

Thanks!