Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Voucher Length

    Scheduled Pinned Locked Moved Captive Portal
    44 Posts 18 Posters 51.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      meridio
      last edited by

      Hello world,

      following the dirkche tips I obtain 10 digits vouchers!

      Why???What am I miss?

      1 Reply Last reply Reply Quote 0
      • L
        limona21
        last edited by

        I managed to make it work so it generates voucher with of length 6-7. Version 2.3.1.

        1. First I generated public and private key using Terminal on my Mac. This generates private key.

        ```
        openssl genrsa 31 > key.private

        
        2\. This generates public key.
           ```
        openssl rsa -pubout < key.private >key.public
        

        3. Open the two files with some text editor and paste the values of the keys in the appropriate boxes in pfsense "voucher private key" and "voucher public key" windows.

        4. Character set: 23456789abcdefghijklmnoprstuvzxy

        5. # Roll bits: 4

        6. # of Ticket bits: 16

        7. # of Checksum bits: 10

        8. I believe I didn't change Magic number. It is 9-digit number

        9. Save and redownload the vouchers

        I've got 6-7 length (wonder why the length is not fixed) vouchers now :) Hopefully someone can benefit from this post.

        1 Reply Last reply Reply Quote 0
        • S
          simbora
          last edited by

          _First generate a key "openssl genrsa 30 > key.private"

          I'm not sure about the 30 but I tried a few times to get the smallest possible number, it was 29-30-31 or something. The lowest one it would accept.

          Then openssl rsa -pubout < key.private >key.public

          And use the following values in the configuration screen:

          Roll bits: #5 (This can be more but we didn't have to use many different rolls)
          Ticket bits: #16
          Checksum bits: #5

          With this values I had a roll with 1023 vouchers with a length of 5-6 characters._

          –-----------------------------------------------------------------------

          here is my step:

          Step: 1=>  openssl> genrsa 31 > key.private ( private key appear normal)
          Step: 2 => openssl > rsa -pubout < key.private >key.public ( Got error after run this command as pic attached file)

          can you pls explain step by step again as i got error to generate public key. or advise if command i had  run is wrong.

          Thanks
          Apiroh

          publickeyerror.JPG_thumb
          publickeyerror.JPG

          E 1 Reply Last reply Reply Quote 0
          • E
            erzkristall23 @simbora
            last edited by

            I had to install an old version of OpenSSL to get this to work. I did the following under Ubuntu WSL:

            # (Install compiling library Make)  
            sudo apt-get install make 
            
            # (Download the latest OpenSSL 1.0.2g binaries)  
            wget https://www.openssl.org/source/openssl-1.0.2l.tar.gz 
            
            # (Extract the tar ball to the local directory)  
            tar -xzvf openssl-1.0.2l.tar.gz 
            
            # (Enter extracted OpenSSL directory)  
            cd openssl-1.0.2l 
            
            #  (Configure binaries for compiling)  
            ./config
            
            # (install configured binaries)  
            make
            
            cd apps
            ./openssl genrsa 31 > key.private
            ./openssl rsa -pubout < key.private > key.public
            cat key.private
            cat key.public
            
            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.