132 Commits

Author SHA1 Message Date
Franco Fichtner
7fec5111bd system: contain abysmal CRL code in crlmanager page
Also try to reconfigure after write_config() which is the sensible
thing to do...
2022-10-06 12:00:57 +02:00
Stephan de Wit
f6cebb421b phpseclib: also include version 3 in certmanager for CSR parsing 2022-09-02 11:15:46 +02:00
Josh Soref
20a3c3da38
Spelling (#5885) 2022-07-18 13:59:03 +02:00
Stephan de Wit
d61b901881
PHP80: CRL support (#5675)
Since php-openssl still has no implementation for CRLs, phpseclib is now used to provide this.

To test this commit:
- Create a CA
- Create a certificate signed by the CA
- Create a CRL and revoke the above certificate
openssl verify -crl_check_all -CRLfile <crl>.crl -CAfile <ca>.crt <certificate>.crt
2022-05-24 12:05:00 +02:00
NOYB
14f3cb5214
Prevent Browser Auto Fill Username/Password (#5311) 2021-11-22 09:03:18 +01:00
Franco Fichtner
662e241eed src: minor syntax issues here 2021-10-05 08:46:10 +02:00
Franco Fichtner
18ad4dbbd3 system: remove $main_buttons use #4216 2021-06-15 07:52:13 +02:00
Franco Fichtner
57b3cff9d4 src: more cleanups on static pages 2021-06-07 10:45:21 +02:00
Ad Schellevis
de09fb4f36 Trust - Distinguished name - Organisation validations, cleanup https://github.com/opnsense/core/pull/5010 2021-05-26 15:16:22 +02:00
jdeluyck
b8cf4e899a fix check on dn_organisation 2021-05-25 20:48:37 +02:00
jdeluyck
57fbbeb084 also fix dn_organization 2021-05-25 20:47:33 +02:00
jdeluyck
4c533b7968 Allow additional characters for 'Distinguished name Organisation" 2021-05-25 19:52:32 +02:00
kulikov-a
71d6d0adeb
system_certmanager: take extensions out of a DN (#4761) 2021-02-27 13:49:20 +01:00
Ad Schellevis
61e41715f0 System / Trust / Certificates : fix "PHP Warning: count(): Parameter must be an array or an object t..." closes https://github.com/opnsense/core/issues/4690 2021-02-09 10:54:30 +01:00
Franco Fichtner
e609494b59 system: adjust lifetime to new recommendation 2021-01-04 11:03:33 +01:00
Ad Schellevis
e4ee28c373 System: Trust: Certificates : replace removeAttr usage to deselect option, although it probably still works with the single item selection, we better use the same construct as in system_advanced_admin.php 2020-09-24 14:21:57 +02:00
Ad Schellevis
9f3f4d7336 user manager: add valid from and to dates to user certs, remember last ca to create a new internal cert.
small improvement when trying to create a new cert for a user, you need to delete the old cert, which is difficult to distinct because both have the same name (validity helps) and the new cert very often needs to use the same ca, set this one as default when requesting a new one.
2020-02-11 17:06:57 +01:00
Ad Schellevis
8775c03bbd Jquery upgrade, "jQuery.fn.size() is deprecated and removed; use the .length property". closes https://github.com/opnsense/core/issues/3869 2020-01-02 18:40:57 +01:00
Franco Fichtner
f7b87dfc43 system: 825 days is the current maximum so use it
Learned this the hard way on macOS Catalina behaviour.  Since this
is a new policy enforced since 2019 it's safe to increase the defaults
(which were 10 years before) as well.  Likely makes a few users
happy that had VPN certificates run out over the years.
2019-12-16 18:56:06 +01:00
Ad Schellevis
02caac79b6
Support ECC Certificate Creation (#3823)
Support ECC Certificate Creation (https://github.com/opnsense/core/pull/3649)
2019-11-20 08:41:26 +01:00
Ad Schellevis
371447e6f1 system_certmanager.php: download p12, disable button when confirm<>password. closes https://github.com/opnsense/core/issues/3739 2019-10-07 20:44:28 +02:00
Ad Schellevis
6b92b81702 Trust, import csr. move csr_info and csr_info_json commands to post to prevent sending large / possible illegal blobs of data in uri. closes https://github.com/opnsense/core/issues/3538 2019-06-17 08:53:05 +02:00
Franco Fichtner
16217583ff system: style updates 2019-04-02 08:36:01 +02:00
Indrajit Raychaudhuri
f9d5f415e4 certmanager: Avoid double encoding cert name (#3340) 2019-03-16 09:37:24 +01:00
Ad Schellevis
fa7e7d878a cleanup https://github.com/opnsense/core/pull/3282 2019-03-08 12:14:08 +01:00
Ad Schellevis
0d9821fe90 Merge branch 'feature/cert-with-local-private-key' of https://github.com/nhirokinet/core into nhirokinet-feature/cert-with-local-private-key 2019-03-08 09:43:41 +01:00
nhirokinet
58cc61dee8 remove download link if IE11 2019-03-06 23:23:13 +09:00
nhirokinet
ceabbf7fc2 better way to judge <a download> support 2019-03-06 23:20:02 +09:00
nhirokinet
e8b5043df7 remove unnecessary function 2019-03-06 22:49:02 +09:00
Ad Schellevis
a98f04372f bit of a hack for https://github.com/opnsense/core/pull/3234 2019-03-05 19:35:47 +01:00
Ad Schellevis
569abf9ac6 fix https://github.com/opnsense/core/pull/3234 2019-03-05 18:42:18 +01:00
Franco Fichtner
27d606474f system: add phpseclib dependency and enable it 2019-03-05 17:20:10 +00:00
nhirokinet
5c6f5f1e57 add hint 2019-03-06 00:06:16 +09:00
nhirokinet
8bb4c88de3 simplify 2019-03-06 00:00:52 +09:00
nhirokinet
c910895368 add option to create key pair without saving onto firewall on "Create Internal Certificate" 2019-03-05 01:20:38 +09:00
Ad Schellevis
f685abcc9c Trust/cert, disable https://github.com/opnsense/core/pull/3234 until @fichtner adds phpseclib 2019-03-01 18:39:07 +01:00
Ad Schellevis
e65669383d Trust/cert, cleanup sign_cert_csr type 2019-03-01 18:36:44 +01:00
Ad Schellevis
2f919443dc cherry-pick https://github.com/opnsense/core/pull/3234 2019-03-01 18:35:50 +01:00
nhirokinet
895d6bb5b2 remove "show certificate info" on certificate list from pending CSR (#3243) 2019-02-18 11:36:09 +01:00
Franco Fichtner
8f80173401 www: a few for #3218 2019-02-14 12:17:07 +01:00
Ad Schellevis
4a8e737ced fix some gettext() + html_safe, discussed c4c7f8d732 2019-02-03 20:04:08 +01:00
NOYB
f5d532a0f4 Legacy Browsers Accommodation (#3158) 2019-02-01 10:26:30 +01:00
Michael Steenbeek
ea8dce33ba Add option to create combined client and server certificate, closes #2800 (#3130) 2019-01-14 10:16:09 +01:00
Michael Steenbeek
97645093c3 Fix missing semicolons 2019-01-11 16:44:23 +01:00
Franco Fichtner
908f905e74 system: reformat header 2018-12-28 14:47:45 +01:00
Michael Steenbeek
6db6598c00 Fix more incorrect HTML tags (#3007) 2018-12-04 10:13:22 +01:00
Ad Schellevis
8a4c461442 Trust/p12 export, add optional password protection for export, closes https://github.com/opnsense/core/pull/2926 2018-12-03 20:56:10 +01:00
Michael Steenbeek
71774ab376 Fix implicit Javascript global variable assignments (#2945) 2018-12-03 13:17:02 +01:00
Michael Steenbeek
32d36429ff Replace some double quoted strings with single quoted ones 2018-11-29 16:58:15 +01:00
Michael Steenbeek
4d69429c30 Fix passing SANs to OpenSSL when generating CSRs (#2967) 2018-11-23 17:45:06 +01:00