OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: opnsense_user12123 on December 19, 2017, 07:07:38 am

Title: Internal certificates and Subject Alternative Names problem still exists?
Post by: opnsense_user12123 on December 19, 2017, 07:07:38 am
Could it be, that this Problem using alternative names still exists ?
I tried this Feature with no luck!
Should be solved - really ?

original posting:
https://forum.opnsense.org/index.php?topic=1160.msg3172#msg3172 (https://forum.opnsense.org/index.php?topic=1160.msg3172#msg3172)

Title: Re: Internal certificates and Subject Alternative Names problem still exists?
Post by: franco on December 19, 2017, 07:47:15 am
If you ask this way I'm inclined to say yes... There was, however, a bug in 17.7.9 that briefly prevented SAN due to an incompatibility with PHP 7.1 that was subsequently fixed.

So... what version are you on, what issue are you seeing? :)


Cheers,
Franco
Title: Re: Internal certificates and Subject Alternative Names problem still exists?
Post by: opnsense_user12123 on December 19, 2017, 10:56:43 am
The latest version avaible. 17.7.10
Title: Re: Internal certificates and Subject Alternative Names problem still exists?
Post by: opnsense_user12123 on December 19, 2017, 10:59:20 am
The problem is that alternative names will not be accepted. Of course you can create the certificate without any problem and export it But then , after importing the certificate On the server the web browser does not accept any of the values I had entered before for the alternative names.
Ip, Uri, DNS.its all the same problem. So I can’t browse the server with any value.

It’s very difficult to describe and my English is not so well but there is a real problem with the alternative names for sure.
Title: Re: Internal certificates and Subject Alternative Names problem still exists?
Post by: opnsense_user12123 on December 22, 2017, 10:02:43 pm
i got the solution on this!

i had to enable "Log SNI information only".

what does this setting exactly do ?
Is it wrong to enable this feature ?
Does it have any disadvantages ?