Cert Manager Layout

Gil

Has there been any further discussion about this feature?
I have a number of OpenVPN servers all with dozens of clients & my cert manager is a mess. Would love to be able to tidy it up
(Something like the firewall rules, with separators and the ability to move and group them)

jimp

There isn't any discussion I've seen about making it easier to navigate.

Adding sorting may not take much effort. Filtering/searching may not be too bad either. Not sure about drag-and-drop/reordering and separators.

Look on redmine for a feature request for that. If you don't see one, create one. Don't assign it to anyone or set a target, though.

Gil

@jimp said in Cert Manager Layout:

Adding sorting may not take much effort. Filtering/searching may not be too bad either.

That would be very helpful, thanks for considering it

jimp

FYI- I added search and sort to the CA and Cert list on 2.5.0 this week, works great: https://redmine.pfsense.org/issues/9412

The commits might apply cleanly against 2.4.4, but I haven't tried.

Gil

@jimp Awesome, thank you jimp

Rico

Nice feature, thanks.

-Rico

Gil

@jimp Is this something that will require editing in future releases, or will it be added?
I find it very helpful, particularly in my Virtualbox Cert Manager.

Rico

@Gil said in Cert Manager Layout:

Is this something that will require editing in future releases, or will it be added?

As jimp said, it will be part of 2.5.0

@jimp said in Cert Manager Layout:

The commits might apply cleanly against 2.4.4, but I haven't tried.

I can confirm it works in 2.4.4_2

-Rico

Gil

Is it just me or does anyone else now get an error when they attempt to create a new cert?

jimp

Works fine here. Is that on 2.5.0? Or on 2.4.4-p2?

Gil

2.4.4-p2, several machines.
Perhaps it is my methodology of importing the 2 files.
I used the Diag / edit file; by copying and pasting each of the new files, then saving.

jimp

That's why, then. Use the patch. There are other changes to the page that aren't in 2.4.4-p2.

Gil

@jimp Thanks again.
I wasn't aware of the Patch Package, very cool.

MeisterBlocker

Is the filtering performed before listing the certificates, or is everything still loaded? I already have over 1000 certificates and it takes over 40 seconds to list them. I use most certificates for OpenVPN and the list takes a long time.
I already asked this question last year in the german forum and had not received an answer yet.

jimp

It's filtered by JavaScript so it wouldn't help in that situation.

JeGr

@MeisterBlocker said in Cert Manager Layout:

I already asked this question last year in the german forum and had not received an answer yet.

Because there was/is none. But after having dozens of pages of posts, you could've asked again after some time - no problem with that. ;)

As for huge deployments with high 3 digit or 4 digit numbers of certificates, I'd definitly go another route as to manage it on pfSense. After all, you only need the CA and a server cert to run the server part. You can/could deploy/script yourself another way to create/generate your config files (e.g. a generic config with links to generic named files that can be bundled with the certs). I'd assume with that high count of VPN connections, you don't manage the users on pfSense either but use some other auth like Radius or LDAP