Project

General

Profile

Actions
Copy link

Bug #14022

closed

PHP error when exporting a CRL for an old CA

Added by Matthew Fearnley about 1 year ago. Updated 11 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Certificates
Target version:
2.7.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.05
Release Notes:
Default
Affected Version:
2.7.0
Affected Architecture:

Description

I have a CA that was generated in 2016, possibly from an old version of pfSense.

When Create a CRL using it and try to Export, I get a PHP error:

Fatal error: Uncaught Error: Call to a member function findContext() on null in /usr/local/share/openssl_x509_crl/X509_CERT.php:56
Stack trace:
#0 /usr/local/share/openssl_x509_crl/X509_CRL.php(98): Ukrbublik\openssl_x509_crl\X509_CERT::getExtVal_Subject('')
#1 /etc/inc/certs.inc(1086): Ukrbublik\openssl_x509_crl\X509_CRL::create(Array, Object(OpenSSLAsymmetricKey), false)
#2 /usr/local/www/system_crlmanager.php(198): crl_update(Array)
#3 {main}
  thrown in /usr/local/share/openssl_x509_crl/X509_CERT.php on line 56
PHP ERROR: Type: 1, File: /usr/local/share/openssl_x509_crl/X509_CERT.php, Line: 56, Message: Uncaught Error: Call to a member function findContext() on null in /usr/local/share/openssl_x509_crl/X509_CERT.php:56
Stack trace:
#0 /usr/local/share/openssl_x509_crl/X509_CRL.php(98): Ukrbublik\openssl_x509_crl\X509_CERT::getExtVal_Subject('')
#1 /etc/inc/certs.inc(1086): Ukrbublik\openssl_x509_crl\X509_CRL::create(Array, Object(OpenSSLAsymmetricKey), false)
#2 /usr/local/www/system_crlmanager.php(198): crl_update(Array)
#3 {main}
  thrown

The behaviour seems to be new to 23.05 or pfSense 2.7.0-DEVELOPMENT.

I'm attaching a redacted version of the CA, regenerated with a new key, which has the same behaviour.

Files

Download all files
oldca.crt (1.58 KB) oldca.crt Matthew Fearnley, 02/23/2023 06:35 AM
oldca.key (1.64 KB) oldca.key Matthew Fearnley, 02/23/2023 06:35 AM
Actions
Copy link

Also available in: Atom PDF