On Thu, Apr 14, 2011 at 9:06 PM, Yehuda Katz <yeh...@ymkatz.net> wrote:
> I generated a CSR from the pfSense certificate manager and had it signed by > StartSSL. > StartSSL changes the certificate subject (and you can not predict > beforehand what it will be). > OpenSSL and IIS accept the signed certificate anyway, but pfSense gives > this error: > >> The certificate subject '[PRIVATE]' does not match the signing request >> subject. > > Is there any way around the subject change to get the certificate imported? > Ok, I found the line where the subjects are checked (/system_certmanager.php around line 285). I am creating nice workaround (I am thinking of a checkbox on the update page to disable the subject check). - Yehuda
