Commit Graph

51 Commits

Author SHA1 Message Date
jim-p
547c56c4fb Create $altnames earlier, and also fix a bracing issue with this if statement. Fixes certificate importing. 2012-05-14 12:39:56 -04:00
jim-p
2f65de893d Add initial support for subjectAltName - still needs some select love for the "type" field, freetext for now for testing (it does work, cert gets the specified subjectAltName). 2012-05-09 16:55:43 -04:00
Erik Fonnesbeck
b805ef90ef Carry over the key length on input errors when creating a certificate signing request. Fixes #2233 2012-02-23 18:00:06 -07:00
jim-p
eaf23c1717 Add button to download a .p12 of a cert+key. Implements #2147 2012-02-14 13:53:07 -05:00
jim-p
baa297497b Check userid better here, 0 is also valid 2012-01-06 13:31:28 -05:00
jim-p
1379d66f11 Add an indication in the certificate list to show if a certificate is internally capable of being a CA (basicConstraints has CA:TRUE) or if the nsCertType is set to server. 2011-11-10 16:37:51 -05:00
jim-p
7aaabd69b0 When creating an internal certificate, offer the user a choice of what constraints to place upon the certificate (CA, Server, or User). 2011-11-09 15:43:49 -05:00
jim-p
0fcaf4f272 Unlock the fields when making a new internal cert, so we copy the data from the CA but are not locked into it. (Cert details often differ from CA details...) 2011-07-01 11:20:09 -04:00
Warren Baker
9338cf353e Note consistency and gettext() added. 2011-06-28 12:59:01 +02:00
Evgeny Yurchenko
22b380aa6f Internal cert and CSR creation error handling added. 2011-06-23 20:28:31 -04:00
Evgeny Yurchenko
24cbe7a895 Bug #1437. Dropdown list for country codes for CSRs (Cert Manager) 2011-06-17 00:57:49 -04:00
Evgeny Yurchenko
21cc2faa85 Bug #1437. Check for invalid characters in the fields for ca, cert and csr. 2011-06-17 00:41:24 -04:00
jim-p
2f51259b41 Redirect back to the CA/Cert management page after delete so a person can't refresh and accidentally delete other CA/Certs. (CRLs are deleted differently and don't need this fix) 2011-06-03 09:03:11 -04:00
Bill Marquette
23b774e0cf Merge branch 'master' into yakatz-ssl 2011-05-14 11:08:39 -05:00
Chris Buechler
1dfb77950b fix typo 2011-04-27 21:10:02 -04:00
yakatz
2594f4010b missed a bit of my last commit 2011-04-21 16:05:51 -04:00
yakatz
a828210b74 checking moduli of ssl csr request and response 2011-04-21 14:29:54 -04:00
yakatz
e2e934e0c9 override option for certificate subject mismatch 2011-04-18 15:18:01 -04:00
jim-p
396cfe2ee5 Validate imported CA/Cert a bit more strongly. Should fix #1190 2011-01-13 09:33:13 -05:00
Scott Ullrich
dd5bf424c1 Fix XSS issues 2010-11-12 11:36:20 -05:00
jim-p
6a0b3ea4bf Indicate in various places if a certificate is revoked. 2010-10-21 16:00:15 -04:00
jim-p
150bbe09fb Indicate if a certificate has been revoked, both in the cert list and the user manager list. 2010-10-21 15:49:39 -04:00
jim-p
5293bfecd8 Fix some forgotten name->descr changes. 2010-10-20 15:41:25 -04:00
jim-p
f2a86ca96f Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320. 2010-10-19 14:19:44 -04:00
jim-p
3d57d2d5f4 Add CRL manager tab to other Cert Manager pages 2010-09-21 15:06:25 -04:00
jim-p
ad9b5c6783 Allow creating a user certificate, pre-fill some info, direct back to user edit screen if that is what led us here. If we are making a user certificate, give another choice to select a pre-existing certificate to associate with that user. 2010-09-02 16:50:15 -04:00
jim-p
0879599c4e Only allow a certificate to be deleted if it is not currently in use. 2010-09-02 16:50:11 -04:00
jim-p
d590fa20a9 Show was a certificate is used for, if anything. 2010-09-02 16:50:10 -04:00
jim-p
b4e6524c16 CA/CERT Move 2010-09-01 15:26:50 -04:00
Renato Botelho
ea53e38ff1 gettext fixes 2010-08-12 09:44:02 -03:00
Renato Botelho
76d49f20d0 Use array instead of explode for reqdfieldsn to fit it better with gettext() calls 2010-04-28 13:17:19 -03:00
Vinicius Coque
38fb1109ce Fixing gettext() implementation for required fields 2010-04-28 12:45:21 -03:00
Carlos Eduardo Ramos
e64aa6f8d5 Reviewing gettext() 2010-04-27 14:07:26 -03:00
Vinicius Coque
51e4f7a3a7 Addin gettext to page title 2010-04-26 16:57:27 -03:00
Vinicius Coque
a37753d7cc Gettext for System::Cert manager 2010-04-26 11:13:33 -03:00
Chris Buechler
1e027f7bf1 remove pfsense references, make generic 2010-04-11 17:16:06 -04:00
jim-p
423afd2d43 Fix typo 2010-02-26 18:23:31 -05:00
Chris Buechler
cf36049547 increase the default cert lifetime 2009-12-21 02:32:21 -05:00
Chris Buechler
5d55ecfc05 fix typo 2009-11-15 17:27:20 -05:00
Scott Ullrich
1d333258dc Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on 2009-09-14 21:49:40 -04:00
Scott Ullrich
d43ad788f2 Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into review/master
Conflicts:
	etc/inc/certs.inc
	etc/inc/upgrade_config.inc
2009-08-24 18:15:25 -04:00
Ermal Luçi
14f5ae084e Remove certs.inc from functions.inc it is needed only by two pages usermanager and certmanager. 2009-06-18 19:59:30 +00:00
Nigel Graham
2cf6ddcbb9 Added support for certificate chains to manager so that lighty can deliver them via SSL. 2009-05-24 08:36:21 +02:00
Ermal Luçi
cee476e886 Correctly enforce limits on html input. 2009-05-07 20:37:27 +00:00
mgrooms
73fbece8f1 Migrate IPsec certificate management to centralized system. 2009-03-12 08:06:17 +00:00
Scott Ullrich
db67bc2a84 This is the cert manager. 2008-10-30 05:17:26 +00:00
Matthew Grooms
96c7a492be Cleanup the tab format of the system ca/certificate pages. The edges were
square instead of rounded like most pfSense pages. While here, fix a bug
that made the submit button disappear when it shouldn't.
2008-09-09 06:19:45 +00:00
Matthew Grooms
93823b1014 Add options to export ca, certificate and user certificate data from the
webui.
2008-09-03 03:53:11 +00:00
Matthew Grooms
d799787e49 Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.

This commit also splits out the certificate management components into a
new system menu item.
2008-08-26 04:48:04 +00:00
Chris Buechler
8ea4b40c9b fix typo 2008-08-09 20:39:34 +00:00