opnsense
associating user and certificate
Hello. I have updated OPNsense to the latest version 24.7. I have a problem associating a certificate with the local user. When I click "+" on "user certificate," it takes me to the "trust" section, and the tab to create a new certificate opens. In that section, I cannot choose an already created one, and if I create a new certificate, it still remains unused.
how to associate openvpnclient certificate and export ovpn config file with a correct certificate?
To Reproduce
Steps to reproduce the behavior:
- Go to 'user'
- Click on 'root' and edit
- click + on user certificates
- is not possibile associaton trust and user
Versions OPNsense 24.7.3_1-amd64 FreeBSD 14.1-RELEASE-p3 OpenSSL 3.0.14
Thank you for creating an issue. Since the ticket doesn't seem to be using one of our templates, we're marking this issue as low priority until further notice.
For more information about the policies for this repository, please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.
The easiest option to gain traction is to close this ticket and open a new one using one of our templates.
I've read the other issues. I understand that you need to create a certificate with the same name as the user, and then it auto-associates. It's not very clear, but it's fine; I've tried it, and it works great. It will definitely be a problem if I want multiple certificates for the same user
CNs must match, certificates are not "manually" linked... it was said elsewhere a few times now.
With the older versions of OPNsense, I have users linked to the Windows LDAP domain. If the users are part of the _vpn group, then they can connect. However, there is only one certificate. Will this still be possible?
With the older versions of OPNsense, I have users linked to the Windows LDAP domain. If the users are part of the _vpn group, then they can connect. However, there is only one certificate. Will this still be possible?
yes, nothing changed with the group membership checks.
This issue has been automatically timed-out (after 180 days of inactivity).
For more information about the policies for this repository, please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.
If someone wants to step up and work on this issue, just let us know, so we can reopen the issue and assign an owner to it.