Franco Fichtner
7fec5111bd
system: contain abysmal CRL code in crlmanager page
...
Also try to reconfigure after write_config() which is the sensible
thing to do...
2022-10-06 12:00:57 +02:00
Stephan de Wit
f6cebb421b
phpseclib: also include version 3 in certmanager for CSR parsing
2022-09-02 11:15:46 +02:00
Josh Soref
20a3c3da38
Spelling ( #5885 )
2022-07-18 13:59:03 +02:00
Stephan de Wit
d61b901881
PHP80: CRL support ( #5675 )
...
Since php-openssl still has no implementation for CRLs, phpseclib is now used to provide this.
To test this commit:
- Create a CA
- Create a certificate signed by the CA
- Create a CRL and revoke the above certificate
openssl verify -crl_check_all -CRLfile <crl>.crl -CAfile <ca>.crt <certificate>.crt
2022-05-24 12:05:00 +02:00
NOYB
14f3cb5214
Prevent Browser Auto Fill Username/Password ( #5311 )
2021-11-22 09:03:18 +01:00
Franco Fichtner
662e241eed
src: minor syntax issues here
2021-10-05 08:46:10 +02:00
Franco Fichtner
18ad4dbbd3
system: remove $main_buttons use #4216
2021-06-15 07:52:13 +02:00
Franco Fichtner
57b3cff9d4
src: more cleanups on static pages
2021-06-07 10:45:21 +02:00
Ad Schellevis
de09fb4f36
Trust - Distinguished name - Organisation validations, cleanup https://github.com/opnsense/core/pull/5010
2021-05-26 15:16:22 +02:00
jdeluyck
b8cf4e899a
fix check on dn_organisation
2021-05-25 20:48:37 +02:00
jdeluyck
57fbbeb084
also fix dn_organization
2021-05-25 20:47:33 +02:00
jdeluyck
4c533b7968
Allow additional characters for 'Distinguished name Organisation"
2021-05-25 19:52:32 +02:00
kulikov-a
71d6d0adeb
system_certmanager: take extensions out of a DN ( #4761 )
2021-02-27 13:49:20 +01:00
Ad Schellevis
61e41715f0
System / Trust / Certificates : fix "PHP Warning: count(): Parameter must be an array or an object t..." closes https://github.com/opnsense/core/issues/4690
2021-02-09 10:54:30 +01:00
Franco Fichtner
e609494b59
system: adjust lifetime to new recommendation
2021-01-04 11:03:33 +01:00
Ad Schellevis
e4ee28c373
System: Trust: Certificates : replace removeAttr usage to deselect option, although it probably still works with the single item selection, we better use the same construct as in system_advanced_admin.php
2020-09-24 14:21:57 +02:00
Ad Schellevis
9f3f4d7336
user manager: add valid from and to dates to user certs, remember last ca to create a new internal cert.
...
small improvement when trying to create a new cert for a user, you need to delete the old cert, which is difficult to distinct because both have the same name (validity helps) and the new cert very often needs to use the same ca, set this one as default when requesting a new one.
2020-02-11 17:06:57 +01:00
Ad Schellevis
8775c03bbd
Jquery upgrade, "jQuery.fn.size() is deprecated and removed; use the .length property". closes https://github.com/opnsense/core/issues/3869
2020-01-02 18:40:57 +01:00
Franco Fichtner
f7b87dfc43
system: 825 days is the current maximum so use it
...
Learned this the hard way on macOS Catalina behaviour. Since this
is a new policy enforced since 2019 it's safe to increase the defaults
(which were 10 years before) as well. Likely makes a few users
happy that had VPN certificates run out over the years.
2019-12-16 18:56:06 +01:00
Ad Schellevis
02caac79b6
Support ECC Certificate Creation ( #3823 )
...
Support ECC Certificate Creation (https://github.com/opnsense/core/pull/3649 )
2019-11-20 08:41:26 +01:00
Ad Schellevis
371447e6f1
system_certmanager.php: download p12, disable button when confirm<>password. closes https://github.com/opnsense/core/issues/3739
2019-10-07 20:44:28 +02:00
Ad Schellevis
6b92b81702
Trust, import csr. move csr_info and csr_info_json commands to post to prevent sending large / possible illegal blobs of data in uri. closes https://github.com/opnsense/core/issues/3538
2019-06-17 08:53:05 +02:00
Franco Fichtner
16217583ff
system: style updates
2019-04-02 08:36:01 +02:00
Indrajit Raychaudhuri
f9d5f415e4
certmanager: Avoid double encoding cert name ( #3340 )
2019-03-16 09:37:24 +01:00
Ad Schellevis
fa7e7d878a
cleanup https://github.com/opnsense/core/pull/3282
2019-03-08 12:14:08 +01:00
Ad Schellevis
0d9821fe90
Merge branch 'feature/cert-with-local-private-key' of https://github.com/nhirokinet/core into nhirokinet-feature/cert-with-local-private-key
2019-03-08 09:43:41 +01:00
nhirokinet
58cc61dee8
remove download link if IE11
2019-03-06 23:23:13 +09:00
nhirokinet
ceabbf7fc2
better way to judge <a download> support
2019-03-06 23:20:02 +09:00
nhirokinet
e8b5043df7
remove unnecessary function
2019-03-06 22:49:02 +09:00
Ad Schellevis
a98f04372f
bit of a hack for https://github.com/opnsense/core/pull/3234
2019-03-05 19:35:47 +01:00
Ad Schellevis
569abf9ac6
fix https://github.com/opnsense/core/pull/3234
2019-03-05 18:42:18 +01:00
Franco Fichtner
27d606474f
system: add phpseclib dependency and enable it
2019-03-05 17:20:10 +00:00
nhirokinet
5c6f5f1e57
add hint
2019-03-06 00:06:16 +09:00
nhirokinet
8bb4c88de3
simplify
2019-03-06 00:00:52 +09:00
nhirokinet
c910895368
add option to create key pair without saving onto firewall on "Create Internal Certificate"
2019-03-05 01:20:38 +09:00
Ad Schellevis
f685abcc9c
Trust/cert, disable https://github.com/opnsense/core/pull/3234 until @fichtner adds phpseclib
2019-03-01 18:39:07 +01:00
Ad Schellevis
e65669383d
Trust/cert, cleanup sign_cert_csr type
2019-03-01 18:36:44 +01:00
Ad Schellevis
2f919443dc
cherry-pick https://github.com/opnsense/core/pull/3234
2019-03-01 18:35:50 +01:00
nhirokinet
895d6bb5b2
remove "show certificate info" on certificate list from pending CSR ( #3243 )
2019-02-18 11:36:09 +01:00
Franco Fichtner
8f80173401
www: a few for #3218
2019-02-14 12:17:07 +01:00
Ad Schellevis
4a8e737ced
fix some gettext() + html_safe, discussed c4c7f8d732
2019-02-03 20:04:08 +01:00
NOYB
f5d532a0f4
Legacy Browsers Accommodation ( #3158 )
2019-02-01 10:26:30 +01:00
Michael Steenbeek
ea8dce33ba
Add option to create combined client and server certificate, closes #2800 ( #3130 )
2019-01-14 10:16:09 +01:00
Michael Steenbeek
97645093c3
Fix missing semicolons
2019-01-11 16:44:23 +01:00
Franco Fichtner
908f905e74
system: reformat header
2018-12-28 14:47:45 +01:00
Michael Steenbeek
6db6598c00
Fix more incorrect HTML tags ( #3007 )
2018-12-04 10:13:22 +01:00
Ad Schellevis
8a4c461442
Trust/p12 export, add optional password protection for export, closes https://github.com/opnsense/core/pull/2926
2018-12-03 20:56:10 +01:00
Michael Steenbeek
71774ab376
Fix implicit Javascript global variable assignments ( #2945 )
2018-12-03 13:17:02 +01:00
Michael Steenbeek
32d36429ff
Replace some double quoted strings with single quoted ones
2018-11-29 16:58:15 +01:00
Michael Steenbeek
4d69429c30
Fix passing SANs to OpenSSL when generating CSRs ( #2967 )
2018-11-23 17:45:06 +01:00