Project

General

Profile

Actions
Copy link

Bug #7520

closed

importing SSL Root CA shows as "self signed" certificate

Added by matt darcy over 8 years ago. Updated over 8 years ago.

Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Certificates
Target version:
-
Start date:
05/04/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

importing the Global Sign Alpha root certificate ( https://secure.globalsign.net/cacert/Root-R1.crt ) as a root CA shows the certificate as "self signed" rather than external. I had another user on the ##pfsense Freenode IRC channel confirm this. It should show as "external"

Running 2.3.3-RELEASE-p1 on a netgate supplied device

Actions
Copy link
 #1

Updated by Jim Pingle over 8 years ago

  • Status changed from New to Not a Bug
  • Affected Version deleted (2.3.3_1)

But it is, technically, self-signed. It's only trusted because the browsers and others trust it.

[...]
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
[...]
        Subject: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
[...]

The issuer is the same as the subject, thus: Self-signed.

The "internal" column shows an "X" meaning it isn't available for signing.

There is no bug here I can see.

Actions
Copy link

Also available in: Atom PDF