SOLVED Unable to inport new SSL cert

[Mugiwara]

Hi all,

I am trying to update my freenas instance with a new SSL cert for web access, but am having difficulty getting the certificate to be imported. I have tried both with and without an encrypted private key. Any idea what I may be doing wrong?

Request Method: POST
Request URL: http://192.168.2**.***/system/certificate/import/
Software Version: FreeNAS-9.10.2 (a476f16)
Exception Type: AttributeError
Exception Value:
'_cffi_backend.CDataGCP' object has no attribute 'cert_info'
Exception Location: /usr/local/lib/python2.7/site-packages/OpenSSL/crypto.py in get_signature_algorithm, line 1084
Server time: Fri, 30 Dec 2016 10:43:24 -0700

Code:

Environment:
Software Version: FreeNAS-9.10.2 (a476f16)
Request Method: POST
Request URL: http://192.168.2**.***/system/certificate/import/
Traceback:
File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py" in get_response
  105.					 response = middleware_method(request, callback, callback_args, callback_kwargs)
File "/usr/local/www/freenasUI/../freenasUI/freeadmin/middleware.py" in process_view
  156.		 return login_required(view_func)(request, *view_args, **view_kwargs)
File "/usr/local/lib/python2.7/site-packages/django/contrib/auth/decorators.py" in _wrapped_view
  22.				 return view_func(request, *args, **kwargs)
File "/usr/local/www/freenasUI/../freenasUI/system/views.py" in certificate_import
  1679.			 form.save()
File "/usr/local/www/freenasUI/../freenasUI/system/forms.py" in save
  2800.		 cert_info = load_certificate(self.instance.cert_certificate)
File "/usr/local/www/freenasUI/../freenasUI/common/ssl.py" in load_certificate
  114.	 signature_algorithm = cert.get_signature_algorithm()
File "/usr/local/lib/python2.7/site-packages/OpenSSL/crypto.py" in get_signature_algorithm
  1084.		 alg = self._x509.cert_info.signature.algorithm
Exception Type: AttributeError at /system/certificate/import/
Exception Value: '_cffi_backend.CDataGCP' object has no attribute 'cert_info'

Thanks

 

[dlavigne]

This will be fixed in the next update: https://bugs.freenas.org/issues/19702.

 

[Mugiwara]

Thanks, sounds good. Ill use my current expired cert until then. Appreciate the quick response.

 

[Comet Jo]

I got the same error today trying to export/import my internally created CA from one FreeNAS 9.10 instance to another. My Googling indicated an issue with pyOpenSSL, which seems to jive with the FreeNAS Bug #19702. Thanks for adding the fix to the next release.

 

[Mugiwara]

Can confirm I am now working on 9.10.2-U1 (https://bugs.freenas.org/versions/379). Imported a new cert with encrypted key, then bound to the https interface, working as expected. Thanks again.

 

[Cheejyg]

Can confirm I am now working on 9.10.2-U1 (https://bugs.freenas.org/versions/379). Imported a new cert with encrypted key, then bound to the https interface, working as expected. Thanks again.

Ditto, it's working now!

 

[Comet Jo]

Confirmed, is working now!