Skip to content
This repository has been archived by the owner on Dec 3, 2022. It is now read-only.

Renewal breaks certificate purposes #14

Open
aTanCS opened this issue Feb 11, 2016 · 1 comment
Open

Renewal breaks certificate purposes #14

aTanCS opened this issue Feb 11, 2016 · 1 comment

Comments

@aTanCS
Copy link

aTanCS commented Feb 11, 2016

S/MIME signing and encryption are missing after renewal

After creating a new certificate:

Certificate purposes:
SSL client : Yes
SSL client CA : No
SSL server : No
SSL server CA : No
Netscape SSL server : No
Netscape SSL server CA : No
S/MIME signing : Yes
S/MIME signing CA : No
S/MIME encryption : Yes
S/MIME encryption CA : No
CRL signing : No
CRL signing CA : No
Any Purpose : Yes
Any Purpose CA : Yes
OCSP helper : Yes
OCSP helper CA : No
Time Stamp signing : No
Time Stamp signing CA : No

After renewal:

Certificate purposes:
SSL client : Yes
SSL client CA : No
SSL server : No
SSL server CA : No
Netscape SSL server : No
Netscape SSL server CA : No
S/MIME signing : No
S/MIME signing CA : No
S/MIME encryption : No
S/MIME encryption CA : No
CRL signing : No
CRL signing CA : No
Any Purpose : Yes
Any Purpose CA : Yes
OCSP helper : Yes
OCSP helper CA : No
Time Stamp signing : No
Time Stamp signing CA : No
@aTanCS
Copy link
Author

aTanCS commented Feb 11, 2016

Quick fix: replace code in openssl_functions.php at 706 to:

    if (ereg('E-mail Protection', $certtext) && ereg('Code Signing', $certtest)) {
        $cert_type = 'email_signing';
    }
    if (ereg('E-mail Protection', $certtext)) {
        $cert_type = 'email';
    }

reetp pushed a commit to reetp/phpki that referenced this issue Feb 27, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant