Pfsense 2.4 server certification probelm

[kiruba]

Dear All,

i am installed pfsense 2.4 Beta version. while i am configuring the Open VPN i am not able to internal server certificate. i am choose the SERVER CERTIFICATE but after i save. It showing as an user certificate. please help me to solve this problem.

thanks

kiruba


[johnpoz]

Not sure what this has to do with openvpn?  Other that is what you want to use the cert for - should be in the 2.4 section.  What snap are you running.

I am on current snap, latest and greatest as of a few minutes ago.  And can not duplicate your problem using the openvpn wizard.  Are you creating the cert during the openvpn wizard or just using the cert manager?

2.4.0-BETA (amd64)
built on Thu Jul 06 07:22:07 CDT 2017
FreeBSD 11.0-RELEASE-p10

I was able to duplicate your problem using the cert manager directly.  But when running through the openvpn wizard to create the cert it created the server cert.  So this needs to be brought up in the 2.4 section.  I will look to see if bug report has already been filed.

Your subject is not very descriptive ;)  And is not going to draw attention.

Top pic is duplication of your problem with cert manager, 2nd pic is via using the openvpn wizard.

Edit:  I created a thread in 2.4 section
https://forum.pfsense.org/index.php?topic=133212.0

And open redmine about it.  See the above thread link for the bug link.

[kiruba]

Dear Johnz,

I am creating on certificate manager. Both user certificate and server certificate. Server certificate only problem while i am save as server  certificate it shows as the user certificate

Thanks

kiruba

[johnpoz]

Yeah as I stated I agree with you - created redmine bug, see the link to the thread I started in the correct location and decent subject line.  Bug has already been picked up by Jim P.

Quick fix for you would be to use the openvpn wizard to bring your vpn up, it will create the server cert.

Looks like already fixed… So should prob show up in the next snap..  I will update later and test.
https://redmine.pfsense.org/issues/7677

see the commit here
https://redmine.pfsense.org/projects/pfsense/repository/revisions/0c82b8c2a77bba6b2b3ab42a880c0e478ebc70f6

[johnpoz]

Ok I show this fixed as of the most current build.. Looks like the mods moved and fixed up your subject for you as well ;)

2.4.0-BETA (amd64)
built on Thu Jul 06 13:35:35 CDT 2017
FreeBSD 11.0-RELEASE-p10

[kiruba]

Dear,

today i am download the pfsense 2.4 beta with yesterday updates in snapshot.pfsene. now the  server certificate is working
thanks john..!!!

[johnpoz]

Don't thank me - than jim P for fixing it, and also adding some nice new features with the ability to add SAN..