Project

General

Profile

Bug #7885

Cert. Manager should validate EKUs on importing a certificate authority

Added by Kill Bill 3 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Low
Assignee:
Category:
Certificates
Target version:
Start date:
09/21/2017
Due date:
% Done:

100%

Affected Version:
All
Affected Architecture:
All

Description

Currently, you can import any certificate as a CA, even ones that are actually unusable as a CA. Subsequently, you can select that in packages that require a usable CA to sign their own certificates, such as Squid.

(Found randomly when debugging a Squid issue with a user, see https://forum.pfsense.org/index.php?topic=136883.msg749056#msg749056)

Associated revisions

Revision 9e608d7a
Added by Jim Pingle about 2 months ago

Ensure that a certificate authority entry is capable of acting as a CA when importing. Fixes #7885

History

#1 Updated by Jim Pingle 2 months ago

  • Target version changed from 2.4.1 to 2.4.2

Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.

#2 Updated by Jim Thompson about 2 months ago

  • Assignee set to Jim Pingle

#3 Updated by Jim Pingle about 2 months ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

#4 Updated by Jim Pingle about 1 month ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF