Firewall Hardware Migration - Certs all scrambled in Export / Import
-
Hi All,
Need to replace a Virtual Host - Needed to move the role from HyperV to KVM.
Exported the HyperV config from PFSense - and Imported in into KVM and all the certs were messed up - I was able to manually wrangle it back exporting the keys etc ...
Has anyone else seen this?
-
Hmm, nope, not a current issue I'm aware of. What pfSense version(s)?
-
@stephenw10 Weird.
Both 272
-
How were the certs broken exactly?
The config file itself invalid?
-
Server Certs not valid - keys imported manually - and TLS Cert with odd characters ...
-
Hmm, nope never seen that. Can you repeat it?
-
@Jake-Biker said in Firewall Hardware Migration - Certs all scrambled in Export / Import:
Has anyone else seen this?
Noop.
As a file written by 'x' should be read by 'x' without any issues.
If this wasn't possible, there is no point in making backups of the config file in the first place (as they can't be read back in).So, I have a question : did you edit the file ?
I do presume that exporting the file out of the VM into some other machine (the host) to to imported it into the new pfSense (GUI) shouldn't change the file format (file encoding).
-
DOH -- of course - I edited the interface names - its an encoding things isn't it! ??
-
@Jake-Biker said in Firewall Hardware Migration - Certs all scrambled in Export / Import:
Server Certs not valid - keys imported manually - and TLS Cert with odd characters ...
Maybe the same "problem" I had...
https://forum.netgate.com/post/1060295 -
Ah if you edited the names with find-and-replace that could well have broken some certs.
