97 Commits

Author SHA1 Message Date
Ad Schellevis
f685abcc9c Trust/cert, disable https://github.com/opnsense/core/pull/3234 until @fichtner adds phpseclib 2019-03-01 18:39:07 +01:00
Ad Schellevis
e65669383d Trust/cert, cleanup sign_cert_csr type 2019-03-01 18:36:44 +01:00
Ad Schellevis
2f919443dc cherry-pick https://github.com/opnsense/core/pull/3234 2019-03-01 18:35:50 +01:00
nhirokinet
895d6bb5b2 remove "show certificate info" on certificate list from pending CSR (#3243) 2019-02-18 11:36:09 +01:00
Franco Fichtner
8f80173401 www: a few for #3218 2019-02-14 12:17:07 +01:00
Ad Schellevis
4a8e737ced fix some gettext() + html_safe, discussed c4c7f8d732 2019-02-03 20:04:08 +01:00
NOYB
f5d532a0f4 Legacy Browsers Accommodation (#3158) 2019-02-01 10:26:30 +01:00
Michael Steenbeek
ea8dce33ba Add option to create combined client and server certificate, closes #2800 (#3130) 2019-01-14 10:16:09 +01:00
Michael Steenbeek
97645093c3 Fix missing semicolons 2019-01-11 16:44:23 +01:00
Franco Fichtner
908f905e74 system: reformat header 2018-12-28 14:47:45 +01:00
Michael Steenbeek
6db6598c00 Fix more incorrect HTML tags (#3007) 2018-12-04 10:13:22 +01:00
Ad Schellevis
8a4c461442 Trust/p12 export, add optional password protection for export, closes https://github.com/opnsense/core/pull/2926 2018-12-03 20:56:10 +01:00
Michael Steenbeek
71774ab376 Fix implicit Javascript global variable assignments (#2945) 2018-12-03 13:17:02 +01:00
Michael Steenbeek
32d36429ff Replace some double quoted strings with single quoted ones 2018-11-29 16:58:15 +01:00
Michael Steenbeek
4d69429c30 Fix passing SANs to OpenSSL when generating CSRs (#2967) 2018-11-23 17:45:06 +01:00
Michael Steenbeek
552fed10d7 Fix HTML errors (#2943) 2018-11-23 10:38:39 +01:00
MichaelDeciso
3407a99132 Implement #2686: Allow setting alternative names on CSRs (#2932) 2018-11-19 10:53:18 +01:00
Ad Schellevis
d573662f5e system_certmanager, allow wildcards in alternative name, for https://github.com/opnsense/core/issues/2858 2018-10-28 19:16:26 +01:00
Robin Schneider
7bf9c376d8 Add openssl x509 -fingerprint -sha256 to "Show certificate info"
Nice thing is that `openssl x509` respects the order of supplied
arguments. It was chosen to print the one line of fingerprint above of
the X509 text dump. `-sha256` is needed because OpenSSL 1.0.2k-freebsd
26 Jan 2017 seems to default to SHA1 currently.

Example of the first line:

```
SHA256 Fingerprint=F0:E6:EB:31:E8:87:AF:52:16:4E:84:05:3B:6C:03:2C:C1:DF:5A:E7:36:F4:32:44:3B:B5:57:63:97:45:C3:77
```

This commit is one piece to make fully trusted bootstrapping easier.
Related to: https://github.com/opnsense/core/issues/2427
URL path of the GUI page involved: /system_certmanager.php
2018-07-06 21:56:43 +02:00
Justin Coffman
1f8fc1295b Added 3072-bit RSA key length options. (#2466)
This conforms to current recommendations and best practices for a
128-bit security margin.

2048 is still the minimum recommended, but 2048-bit RSA only aligns to a
112-bit security margin, roughly analogous to 3DES. AES-128, the
minimum recommended cipher, requires a 3072-bit RSA key and a 256-bit digest
(SHA256) to provide an equivalent security level in all cryptographic
components.
2018-06-19 07:04:04 +02:00
Franco Fichtner
f33f527cf1 system: rework style in remaining pages #2440 2018-06-04 11:20:59 +00:00
Franco Fichtner
0181d1ddd9 system: userid 0 has trouble with %s, loosely refs #2246 2018-06-02 11:24:57 +00:00
NOYB
9d96bdcbc7 Help For - Data For Attribute
Use original element (<div>/<small>) with "data-for" attribute.

The old jquery "for" attribute selectors can be removed once conversion to "data-for" attribute is complete (including plugins).

The old jquery selectors to remove once conversion is complete.
  opnsense_ui.js & head.inc
  $("*[for='" + $(this).attr('id') + "']")....
  $('[for*="help_for"]')....
2018-03-17 16:12:55 +01:00
NOYB
6ef9a127ff HTML Compliance - Attribute "type" on Element <script>
Warning: The type attribute is unnecessary for JavaScript resources.

HTML5: Edition for Web Authors
http://www.w3.org/TR/2014/REC-html5-20141028/scripting-1.html
The default, which is used if the attribute is absent, is "text/javascript".

The Script element
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script
HTML5 specification urges authors to omit the attribute rather than provide a redundant MIME type.
2018-01-22 19:13:34 +01:00
Franco Fichtner
5e970ddf87 system: allow dots in certificate details 2018-01-19 16:18:56 +01:00
NOYB
4a7bcae7af HTML Compliance - Attribute "for" on Element <div>
Error: Attribute "for" not allowed on element "div" at this point.
Attributes for element "div": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-div-element

HTML attribute reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
The "Output" element: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/output

Attributes for element "output": http://www.w3.org/html/wg/drafts/html/master/single-page.html#the-output-element
2018-01-06 10:52:17 +01:00
NOYB
b2f4cfa7c1 HTML Compliance - Attribute "type" on Element <i>
Error: Attribute "type" not allowed on element <i> at this point.
2018-01-05 08:36:26 +01:00
NOYB
76aab5cb52 HTML Compliance - Obsolete table attributes
width, align, valign, cellpadding, cellspacing, border, summary

Error: The width attribute on the table element is obsolete. Use CSS instead.
Error: The align attribute on the table element is obsolete. Use CSS instead.
Error: The valign attribute on the table element is obsolete. Use CSS instead.
Error: The cellpadding attribute on the table element is obsolete. Use CSS instead.
Error: The cellspacing attribute on the table element is obsolete. Use CSS instead.
Error: The border attribute on the table element is obsolete. Use CSS instead.
Error: The summary attribute on the table element is obsolete. Consider describing the structure of the table in a caption element or in a figure element containing the table; or, simplify the structure of the table so that no description is needed.
2018-01-04 18:26:02 +01:00
Franco Fichtner
11ac9d3ed1 system: why init string when you want an array... 2017-12-08 13:30:26 +01:00
Fabian Franz
2e5e6b07b7 fix: system_certmanager.php xss 2017-11-30 16:45:29 +01:00
Ad Schellevis
66c533548f system_certmanager.php html escape cert info, https://github.com/opnsense/core/issues/1964 2017-11-30 08:27:31 +01:00
Ad Schellevis
1219f2f1db system_certmanager, xss with crafted cert. for https://github.com/opnsense/core/issues/1964 2017-11-28 10:57:01 +01:00
Franco Fichtner
d87c6ff556 Scripts: add a license generator for GitHub 2017-08-05 20:21:35 +02:00
Ad Schellevis
69510a5fad legacy ui pages cleanup for https://github.com/opnsense/core/issues/1733 2017-07-22 15:01:26 +02:00
Ad Schellevis
7a78cc996d Trust, fix autofill CA fields, closes https://github.com/opnsense/core/issues/1575 2017-04-30 15:26:15 +02:00
Franco Fichtner
6801b20c06 src: use the opportunity to scrub supurious ";;" spots 2017-01-07 10:46:06 +01:00
Franco Fichtner
d3376f7f10 src: webConfigurator -> web GUI 2016-12-19 07:16:08 +01:00
Ad Schellevis
0a88cca3c9 crashreport, suppress openssl warnings 2016-11-10 21:05:09 +01:00
Franco Fichtner
c5ab052b67 system: url_safe() for #1168 2016-10-11 08:11:12 +02:00
Franco Fichtner
d988799a81 src: translations tweaks
Taking the liberty to use this as an opportunity to kill the
usage of "e-mail".

Suggested by: @Antonio-Prado
2016-08-15 07:31:18 +02:00
Ad Schellevis
3973a6ce86 (trust, csr) add optional ou field, closes https://github.com/opnsense/core/issues/1121 2016-08-07 18:10:23 +02:00
Franco Fichtner
fb8c8b44a6 trust: change export button labels; closes #1021
While there zap a note that is obvious, because there is no button
and a text label saying what facility uses the cert...
2016-06-18 15:12:39 +02:00
Franco Fichtner
0ddccb7cd1 ui: tooltip placement and button alignment; closes #959 2016-05-26 21:24:45 +02:00
Ad Schellevis
74428f5b66 (cert) Allow keysize up to 8192, closes https://github.com/opnsense/core/issues/960 2016-05-24 16:37:30 +02:00
Ad Schellevis
845cb7aff1 add opnsense_standard_table_form class to forms (2) 2016-05-20 18:13:49 +02:00
Ad Schellevis
0b31dc522f add opnsense_standard_table_form class to forms 2016-05-20 17:09:58 +02:00
Ad Schellevis
7ab0b3463f (legacy) www: strip action attribute from forms where not needed, closes https://github.com/opnsense/core/issues/929 2016-05-12 19:45:28 +02:00
Franco Fichtner
9989097dd8 src: second part of restyle done 2016-04-01 16:05:35 +02:00
Ad Schellevis
67b827a84f html correction 2016-03-04 12:07:12 +01:00
Fabian Franz
e2bd560500 translation fix by @8191 2016-01-10 21:07:23 +01:00