OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Using intermediate certificate issued by internal PKI
« previous next »
  • Print
Pages: [1]

Author Topic: Using intermediate certificate issued by internal PKI  (Read 2014 times)

mahescho

  • Jr. Member
  • **
  • Posts: 59
  • Karma: 2
    • View Profile
Using intermediate certificate issued by internal PKI
« on: December 14, 2018, 08:17:41 am »
Hi,

I've an internal PKI and created an intermediate certificate for my Opnsense with:

Code: [Select]
X509v3 Key Usage:
Certificate Sign, CRL Sign
Netscape Cert Type:
SSL CA, S/MIME CA, Object Signing CA

and imported the root certificate and the intermediate certificate with the private key. When I try to issue a server or client certificate using the intermediate certificate I get:

Code: [Select]
The following input errors were detected:

openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0E06D06C:configuration file routines:NCONF_get_string:no value
openssl library returns: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

How to fix this?

TIA
Logged
OPNsense 21.1.2-amd64
FreeBSD 12.1-RELEASE-p13-HBSD
OpenSSL 1.1.1j 16 Feb 2021

mahescho

  • Jr. Member
  • **
  • Posts: 59
  • Karma: 2
    • View Profile
Re: Using intermediate certificate issued by internal PKI
« Reply #1 on: December 18, 2018, 12:16:26 pm »
https://github.com/opnsense/core/issues/3048

Logged
OPNsense 21.1.2-amd64
FreeBSD 12.1-RELEASE-p13-HBSD
OpenSSL 1.1.1j 16 Feb 2021

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Using intermediate certificate issued by internal PKI
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2