Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense-issued certificates invalid

    Scheduled Pinned Locked Moved webGUI
    1 Posts 1 Posters 294 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dodexahedron
      last edited by

      I have a Microsoft PKI infrastructure, and am adding pfSense as an intermediate.
      I successfully created and signed the intermediate CA cert and have it installed on pfSense.
      However, certificates issued by pfSense are invalid, according to chrome and openssl:
      Screenshot_20190714_121353.png

      Here are the root and pfSense CA certs, as shown in the CA tab:
      CA Tab

      az-dc-2 is the root CA, and that CA is trusted by my local machine (Ubuntu 19.04). Internal websites signed with certificates directly issued by this root validate just fine.
      az3-pfsense-lab-1-CA is the cert for this pfSense box. It is a CA cert signed by az-dc-2, and also validates fine according to openssl.

      OpenSSL verify OK

      So, to my eye, it looks like nothing is wrong with the configuration, but the certificates that pfSense issues are still invalid.
      In chrome, the chain even looks normal, but the server cert is still untrusted.
      Screenshot_20190714_121629.png

      What am I missing?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.