Voucher Length

klamath

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Sander

Thanks!!!
works only with 31… i got error with 30!

"openssl genrsa 31 > key.private"

The vouchers is now with 7 characters length!

Work like a charm!!!
THANKS!!! THANKS!!! THANKS!!!

brunoguidone

@sandern:

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Sander

Sorry, can you explain better?
because it still doesn't work. I need to generate a voucher with 6 characters.

Thanks for help,
Bruno

wallabybob

What parameters did you try? What was the outcome?

How many characters do you have in your set of available characters for voucher codes?

brunoguidone

@wallabybob:

What parameters did you try? What was the outcome?

How many characters do you have in your set of available characters for voucher codes?

Hi Wallabybob
That's my configuration:
.
I tried all combinations and stays longer than 10 characters. Can you help me, please ?

Thanks,
Bruno

wallabybob

@brunoguidone:

Can you help me, please ?

I have not read the voucher handling code so I'm guessing. After reading this thread a few times I SUSPECT Sandern left out a step in his instructions: I suspect that the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page. Did you do that?

I suspect the default keys need to be replaced by shorter keys to produce a shorter length voucher code. Possibly a smaller magic number will also help.

brunoguidone

@wallabybob:

@brunoguidone:

Can you help me, please ?

I have not read the voucher handling code so I'm guessing. After reading this thread a few times I SUSPECT Sandern left out a step in his instructions: I suspect that the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page. Did you do that?

I suspect the default keys need to be replaced by shorter keys to produce a shorter length voucher code. Possibly a smaller magic number will also help.

Hi Wallabybob,
thank you so much !!! Its Works!! was really missing copy content to the correct fields.

Thanks,
Bruno

wallabybob

Thanks for reporting back.

rinx

Hello!

I have the same requirement as the topicstarter and I need to have vauchers with 6 sumbols.
I tried to follow instructions described in all replies.

run:

openssl genrsa 30 > key.private
openssl rsa -pubout < key.private >key.public

Used the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

deleted and recreated vouchers. Didn't work. Still have vouchers with 11 characters lenght.

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

Can you please explain me how to do it step by step?

Thanks in advance!

wallabybob

@rinx:

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

The pfSense shell commandopenssl genrsa 30 > key.privategenerates a new private key and writes it into file named key.private in the default path. The shell command```
openssl rsa -pubout < key.private >key.public


Copy and paste is recommended here so avoid making errors in manually copying the key to the voucher configuration page.

rinx

@wallabybob:

@rinx:

As I suppose I will have to "the contents of the key.private and key.public files should be pasted into the corresponding key boxes on the voucher configuration page"

I know where to instert the new private and public keys, however I have no idea how to extract new generated private and public keys.

The pfSense shell commandopenssl genrsa 30 > key.privategenerates a new private key and writes it into file named key.private in the default path. The shell command```
openssl rsa -pubout < key.private >key.public
Copy and paste is recommended here so avoid making errors in manually copying the key to the voucher configuration page.

Thanks for clarification! That has worked and I have 5 characters vouchers now!
Cheers!

dirkche

I´m still unable to generate a lesser code.
After trying "openssl genrsa 30" with the openSSL Tool and copy/paste it on Captive Portal page, my Database is destroyed while generating voucher codes.
Following Error is displayed.
"CFG bad content in cfg file /var/etc/voucher.cfg"

Copy old rsa key back, database is still destroyed. So i have to restore my backup config.

Can someone write me a step by step list?

wallabybob

@dirkche:

Can someone write me a step by step list?

You apparently generated a private key. What did you use for the public key?

dirkche

Hi,

i used this:

Hi,

First generate a key "openssl genrsa 30 > key.private"

I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

Then openssl rsa -pubout < key.private >key.public

And use the following values in the configuration screen:

Roll bits: #5 (This can be more but we didn't have to use many different rolls)
Ticket bits: #16
Checksum bits: #5

With this values I had a roll with 1023 vouchers with a length of 5-6 characters.

Here i used 31 instead of 30

I copied the wrong with "openssl genrsa 30"….. i meaned "openssl genrsa 31"

wallabybob

I have not experimented with shortening the voucher length and don't have a system on which I am prepared to experiment.

The public key depends on the private key. Both public and private keys are inputs to the voucher generation. If you attempt to generate vouchers with a "new" private key and an "old" public key you are likely to get "inconsistent" results because the two keys are not correctly related. In your post so far you have not mentioned generation of a new public key derived from your new private key nor have you mentioned providing such a key as input to the pfSense voucher generation page.

What are you wanting to achieve by changing things: shorter (how many characters?) length voucher codes?

dirkche

@wallabybob

i found in an another topic a how to for generating public/private keys with openSSL (http://www.openssl.org/).
I generated a private key and with it a public key and paste it on my captive portal page.

Using "openssl genrsa 30 > key.private" on command line of my pfsense, nothing happens!

wallabybob

@dirkche:

Using "openssl genrsa 30 > key.private" on command line of my pfsense, nothing happens!

What are you expecting to happen?

See my explanation of 26-Nov (or possibly 25-Nov, depending on your timezone).

FiFaSteveO

@wallabybob:

@dirkche:

Using "openssl genrsa 30 > key.private" on command line of my pfsense, nothing happens!

What are you expecting to happen?

See my explanation of 26-Nov (or possibly 25-Nov, depending on your timezone).

i was expecting the keys to be output so i could paste them into my configuration? i am a little confused here after running both commands where do i find these keys?

wallabybob

@FiFaSteveO:

i am a little confused here after running both commands where do i find these keys?

I don't think I can put it any more clearly than I did in my reply in this topic of 26-Nov (or possibly 25-Nov, depending on your timezone). Did you read that?

dirkche

Aaaaah i see

reads the previously generated private key and writes a matching public key into the file key.public. So use the shell command cat (or more) to display the contents of the appropriate key file, copy the contents of the key file into the paste buffer then paste it into the appropriate field in the voucher configuration page.

Copy and paste is recommended here so avoid making errors in manually copying the key to the voucher configuration page.

I missed this step :-/

EDIT: I think the problem is, that my command shell will not properly work
executing openssl genrsa 31 > key.private will just write this:
$ openssl genrsa 31 > key.private

2#EDIT:
ok cat key.private shows a key but cat key.public not after 1min cat key.private also dont works.

wallabybob

Here's an exact copy of the commands run on my system, a VIA C3 800MHz CPU (hardly a speed demon):```

[2.0.1-RELEASE][admin@pfsense.example.org]/root(32): time openssl genrsa 31 > key.private
Generating RSA private key, 31 bit long modulus
.+++++++++++++++++++++++++++
.+++++++++++++++++++++++++++
e is 65537 (0x10001)
0.052u 0.015s 0:00.09 66.6% 552+628k 0+2io 0pf+0w
[2.0.1-RELEASE][admin@pfsense.example.org]/root(33): time openssl rsa -pubout < key.private > key.public
writing RSA key
0.021u 0.021s 0:00.04 100.0% 552+570k 0+1io 0pf+0w
[2.0.1-RELEASE][admin@pfsense.example.org]/root(34): cat key.private
-----BEGIN RSA PRIVATE KEY-----
MCwCAQACBQCDnyRNAgMBAAECBAF3ThkCAwDwawIDAIwnAgMAmOMCAkxrAgJ5fg==
-----END RSA PRIVATE KEY-----
[2.0.1-RELEASE][admin@pfsense.example.org]/root(36): cat key.public
-----BEGIN PUBLIC KEY-----
MCAwDQYJKoZIhvcNAQEBBQADDwAwDAIFAIOfJE0CAwEAAQ==
-----END PUBLIC KEY-----
[2.0.1-RELEASE][admin@pfsense.example.org]/root(37):


By preceding the openssl commands by _time_ I get the shell to report the time the command takes to complete. Neither is particularly long. These commands were typed in an SSH session to the pfSense box.

@dirkche:

> ok cat key.private shows a key but cat key.public not after 1min cat key.private also dont works.

Did you issue the command to generate the public key?