Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CA / Certificate Import / Export

    Scheduled Pinned Locked Moved webGUI
    5 Posts 3 Posters 8.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bimmerdriver
      last edited by

      pfSense provides the .crt format for CA / certificate export. For import, the CA /certificate must be pasted in PEM format. Is there a reason why pfSense will not import CA / certificate in the .crt format or some other format such as .cer? Windows 10 will export in .cer or .p7b format. (See attachment.)

      Capture.PNG
      Capture.PNG_thumb

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Because accepting them in PEM format requires no extra work. Everything takes that format or can be easily converted from that format.

        To accept certificates in other formats means we'd need a bunch of extra code to detect the other formats and convert them to PEM when importing.

        In that wizard, use the "Base-64 encoded X.509 (.CER)" format, which is already PEM. Don't trust the default file extensions given by Windows.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • B
          bimmerdriver
          last edited by

          @jimp:

          Because accepting them in PEM format requires no extra work. Everything takes that format or can be easily converted from that format.

          To accept certificates in other formats means we'd need a bunch of extra code to detect the other formats and convert them to PEM when importing.

          In that wizard, use the "Base-64 encoded X.509 (.CER)" format, which is already PEM. Don't trust the default file extensions given by Windows.

          Okay, thanks for the clarification. I didn't realize you could open a base-64 .cer file with notepad and copy the text.

          I still don't understand why pfsense can't import a ca or cert in .crt format, when that's the format it uses for exporting a ca or cert.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            I think the .crt is just confusing you - you can open that .crt file in notepad its just the base 64 encoded file..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • B
              bimmerdriver
              last edited by

              @johnpoz:

              I think the .crt is just confusing you - you can open that .crt file in notepad its just the base 64 encoded file..

              Thanks for the reply. Not sure how I missed that.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.