Using intermediate certificate issued by internal PKI

[mahescho]

Hi,

I've an internal PKI and created an intermediate certificate for my Opnsense with:

Code Select Expand


X509v3 Key Usage:
Certificate Sign, CRL Sign
Netscape Cert Type:
SSL CA, S/MIME CA, Object Signing CA


and imported the root certificate and the intermediate certificate with the private key. When I try to issue a server or client certificate using the intermediate certificate I get:

Code Select Expand


The following input errors were detected:

openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch


How to fix this?

TIA

[mahescho]

https://github.com/opnsense/core/issues/3048