Project

General

Profile

Statistics
| Branch: | Tag: | Revision:

root/src/usr/local @ 2c9601c9

Name Size
  bin
  captiveportal
  etc
  pkg
  sbin
  share
  www

Latest revisions

# Date Author Comment
2c9601c9 11/04/2019 07:02 PM Jim Pingle

Add support for randomized cert serial numbers. Implements #9883
a6487fc8 11/04/2019 01:35 PM Jim Pingle

CRL Fixes

  • Correct a PHP error in non-edit CRL actions. Fixes #9879
  • Correct display of revoke by serial options when the CRL CA contains no certificates. Issue #9869
  • Wording/text changes
63fb68d7 11/01/2019 08:14 PM Jim Pingle

CRL management overhaul

  • Allow revoking by serial number or cert. Implements #9869
  • Allow revoking multiple entries at a time. Implements #3258
  • Declutter the main CRL list screen
  • Move the create control to the bottom under the list
  • Various other efficiency/style improvements
8d4663c1 10/31/2019 08:34 PM Jim Pingle

Also refresh trust store when renewing. Issue #4068
7daab3d8 10/31/2019 08:28 PM Jim Pingle

Add option to trust local CA entries. Implements #4068

Similar to closed PR #3558 from overhacked, but with a number of
changes.
e78fe74d 10/31/2019 08:04 PM Jim Pingle

Make value of cert notify setting consistent with others. Issue #7332
b86891b1 10/31/2019 05:59 PM Jim Pingle

Allow packet capture to match IPv4+IPv6 CARP. Fixes #9867
746c9afc 10/31/2019 05:30 PM Jim Pingle

CA validity checks. Fixes #3956
46869dd2 10/31/2019 05:23 PM Jim Pingle

Add clientAuth EKU to Server type certificates. Fixes #9868
3f0b7bc3 10/31/2019 05:10 PM Jim Pingle

Certificate strength improvements. Fixes #9825

  • Change default GUI cert lifetime to 825 days
  • Add notes on CA/Cert pages about using potentially insecure parameter
    chocies
  • Add visible warnings on CA/Cert pages if paramers are insecure/not
    recommended.

View revisions

Also available in: Atom