2019-07-22 02:35:03 +02:00
2019-07-20 17:57:49 +02:00
2019-07-21 18:05:03 +02:00
2019-07-22 02:02:03 +02:00
2019-07-22 02:35:03 +02:00

pfSense-Certificate-Viewer

Powershell script: pfSense Certificate Viewer

Sometimes it happens in pfSense that certificates are created with duplicated SerialNumbers (for the same CAroot). If any of these certificates are revoked, and it's in use for openVPN, we will be surprised of having more revoked certs than the desired. This tool finds those duplicated SerialNumbers into a non encrypted xml pfSense config backup.

Last change 2017/07/21: New feature: Now it also shows the CRL(s) in which the cert appears.

Thanks to pippin for show me the links to the pfSense docummented issue:

https://redmine.pfsense.org/issues/3694

https://forum.netgate.com/topic/69978/generated-certificates-with-non-unique-serial-numbers/2

Description
Get all certificates from a pfSense/OPNsense config file backup to look for possible CRL issues due to duplicated cert serial numbers. Support for encrypted XML files from (pfSense v2.4.4-Release-p3 and earlier), (OPNsense 19.7.4).
Readme GPL-3.0 122 KiB
Languages
PowerShell 100%