Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    My CA Authority create blank CA User

    OpenVPN
    4
    7
    89
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rlozano last edited by

      Hi everyone!

      I have a problem with pfsense. I currently have an openvpn tunnel running with a user/client that I created.
      certificateTest.PNG
      userList.PNG
      The problem is that when and I want to add more users to that CA Authority to add them to the tunnel, I create the blank certificate.
      certificaters.PNG
      I think it's something that I have played later after everything is working since I have a user running. Attached photos.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • Rico
        Rico LAYER 8 Rebel Alliance last edited by

        I tried some stuff but can't reproduce this.
        Which exact version of pfSense are you running?

        -Rico

        2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          I create certs all the time under multiple different CA's on pfsense..

          Not sue what he did - but sure can not duplicate it. Going to need steps on what you did to create this blank cert.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 23.01 | Lab VMs CE 2.6, 2.7

          1 Reply Last reply Reply Quote 0
          • jimp
            jimp Rebel Alliance Developer Netgate last edited by

            Odds are, it's either not a current version or it's been altered in some way that is breaking OpenSSL. Used to be the easiest way to make that happen would be to change something like the product name without making other necessary adjustments.

            There have been a few bugs in recent history on the user manager page when creating certificates, but none quite match that exactly. Something is causing the OpenSSL command to fail but not so badly that it produces an error in the GUI.

            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • R
              rlozano last edited by

              thanks everyone.
              In the end I created OpenVpn with new CA and VPN certificates again and now it is working. I do not know what could happen before :/

              jimp 1 Reply Last reply Reply Quote 0
              • jimp
                jimp Rebel Alliance Developer Netgate @rlozano last edited by

                @rlozano said in My CA Authority create blank CA User:

                thanks everyone.
                In the end I created OpenVpn with new CA and VPN certificates again and now it is working. I do not know what could happen before :/

                Does the new CA have exactly the same settings as the previous CA, including the exact same subject? It could be something in the old CA itself that triggered the problem. Without all the details it's impossible to say, though.

                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • R
                  rlozano last edited by

                  I think I touch something but I do not know exactly what. But when this happens it's better to start again :).
                  thanks!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post