Project

General

Profile

Bug #37694

Allow users to paste the contents of certificates signed by an external CA

Added by Christoffer Wallén about 2 years ago. Updated about 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
Waqar Ahmed
Category:
Middleware
Target version:
Seen in:
Severity:
Medium
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

With the new UI (also applies to legacy UI) in 11.2-BETA1, I am now unable to complete CSR which are signed externally. In the UI for 11.1-U5 there is a form/box beneath the CSR form/box which is to be filled with the cert recieved by external CA, but this has gone missing with the new update.

Side note: Pressing enter when editing a CSR in legacy UI results in an exception as it (probably) wants the signed certificate which can't be input. Included in attachments in two parts.


Related issues

Related to FreeNAS - Bug #38903: Missing Certificate field for Certificate Signing RequestClosed
Copied to FreeNAS - Bug #38026: Add writeable certificates field when importing a certificate in new UIDone

Associated revisions

Revision c3d07fcc (diff)
Added by Waqar Ahmed about 2 years ago

Allow users to complete CSR This commit allows users to paste the contents of the certificates they have got signed from an external CA in the CSR object for 11.2. We are going to disallow this in 11.3 and have a separate section to facilitate this behaviour Ticket: #37694

History

#1 Updated by Christoffer Wallén about 2 years ago

  • File debug-freenas-test-20180711171603.txz added
  • Private changed from No to Yes

#2 Updated by Dru Lavigne about 2 years ago

  • Assignee changed from Release Council to William Grzybowski

#5 Updated by Dru Lavigne about 2 years ago

Notes that some screenshots are in duplicate issue.

#6 Updated by William Grzybowski about 2 years ago

  • Category changed from GUI (new) to Middleware
  • Assignee changed from William Grzybowski to Waqar Ahmed

Waqar, can you investigate this please? I dont recall if this was made intentional.

#7 Updated by Christoffer Wallén about 2 years ago

Sorry for posting two issues instead of one, I pressed cancel as I thought I missed something but it seems both got added! I don't think the debug info is complete due to canceling, but it shouldn't be needed.

#8 Updated by Waqar Ahmed about 2 years ago

  • Status changed from Unscreened to Screened

#9 Updated by Waqar Ahmed about 2 years ago

  • Status changed from Screened to In Progress
  • Severity changed from New to Medium

This ticket has been fixed for 11.3 and some other major features added as well for the CSR section. For 11.2, we are reverting back to what we had previously ( user pasting Certificate in the CSR object in legacy UI )

#11 Updated by Waqar Ahmed about 2 years ago

  • Status changed from In Progress to Ready for Testing

#12 Updated by Waqar Ahmed about 2 years ago

  • Target version changed from Backlog to 11.2-BETA2

#13 Updated by Waqar Ahmed about 2 years ago

  • Copied to Bug #38026: Add writeable certificates field when importing a certificate in new UI added

#14 Updated by Dru Lavigne about 2 years ago

  • Subject changed from Cannot paste certificate from externally signed CSR to Allow users to paste the contents of certificates signed by an external CA
  • Needs Doc changed from Yes to No
  • Needs Merging changed from Yes to No

#15 Updated by Dru Lavigne about 2 years ago

  • File deleted (debug-freenas-test-20180711171603.txz)

#16 Updated by Dru Lavigne about 2 years ago

  • Private changed from Yes to No

#17 Updated by Timothy Moore II about 2 years ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Please review my testing procedure as I may have missed something.

Testing with a FreeNAS Mini and FreeNAS System updated to FreeNAS-11.2-MASTER-201807180859: (legacy UI only)

[System 1] Go to System/CAs and create a new Internal CA. Copy the contents of the “Export Certificate” and “Export Private Key” files.

[System 2] Go to System/CAs and click Import CA. Paste the certificate in the “Certificate” field and Private key in the “Private Key” field. Click “OK”. Go to System/Certificates and create Certificate Signing Request. Go to System/CAs, select the imported CA, and click “Sign CSR”. Select the created CSR and click “OK”.

#18 Updated by Dru Lavigne about 2 years ago

  • Status changed from Passed Testing to Done

#20 Updated by Waqar Ahmed about 2 years ago

  • Status changed from Done to Ready for Testing

The following steps should be taken to test this ticket:
1) Create Internal CA
2) Create CSR
3) Sign CSR via the internal CA
4) A new cert would be generated from step 3. Copy the contents of the cert generated in step 3 and paste it in the CSR object's certificate field

#21 Updated by Dru Lavigne about 2 years ago

  • Needs QA changed from No to Yes

#22 Updated by Timothy Moore II about 2 years ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Thanks - Retested with FreeNAS System on FreeNAS-11.2-MASTER-201807180859:

[legacy UI only]
Go to System/CAs. Create new trivial Internal CA.
Go to System/Certificates. Create new Certificate Signing Request.
Go to System/CAs and use the Internal CA to "Sign CSR". Add the CSR and add a unique identifier.
Go to System/Certificates. Copy the certificate from the new entry that has the unique identifier and paste it into the "Certificate" field of the previously created CSR.

#23 Updated by Timothy Moore II about 2 years ago

  • Related to Bug #38903: Missing Certificate field for Certificate Signing Request added

#24 Updated by Dru Lavigne about 2 years ago

  • Status changed from Passed Testing to Done

Also available in: Atom PDF