Uploaded image for project: 'TrueNAS'
  1. TrueNAS
  2. NAS-103541

Certificates created via CSR with local CA hard set to 10 years

    XMLWordPrintable

    Details

      Description

      When you create a new local certificate via CSR and local CA, it does not give you the option for lifetime on the certificate in the request, and it defaults to making this 10 years.

      The new Mac Catalina update invalidates any certificate that has a lifespace greater than 820 days so any cert generated by FreeNAS will be seen as invalid/revoked. https://support.apple.com/en-us/HT210176 

       

      This has been seen in the 11.3-nightlies, I have not tested it in 11.2.

        Attachments

          Attachments

            JEditor

              Activity

                People

                Assignee:
                william William Grzybowski
                Reporter:
                sfinlon Scott Finlon
                Watchers:
                Scott Finlon, William Grzybowski
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: