Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Answers 1 answer
  • Subscribers 7 subscribers
  • Views 6323 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Client Zertifikat erneuern

Christian Seeger

Hallo zusammen,

gibt es eine Möglichkeit das Client Authentication certificate zu erneuern. Die Emailadresse ist nicht mehr korrekt. Wenn ich es löschen will gibt es den Hinweis:

Definitionen & Benutzer -> Client-Authentifizierung -> Client-Authentifizierung: Das X.509-Zertifikat-Objekt 'Client Authentication certificate' wird noch von Client-Authentifizierungs-Zertifikat verwendet. Soll es trotzdem gelöscht werden?

Wenn ich OK klicke, erneuert er das Zertifikat nur (anderer Fingerprint) aber mit der alten Emailadresse. Ich habe die Emailadresse schon überall ausgetauscht.

Hat jemand noch eine Idee oder habe ich was übersehen?

Vielen Dank schonmal!

Viele Grüße,

Christian



This thread was automatically locked due to age.
Parents
  • 0

    Hallo Christian,

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. Frowning2)

    The signing_ca for that cert was created when the UTM was first set up and there's no way to change it in WebAdmin.  When you generate a new client auth cert, the email address from the signing CA will be used.  I don't know how to replace that at the command line, but you can confirm this with:

         cc get_object_by_name ca signing_ca 'Client Authentication CA'|grep email

    You can see that CA is the one used by the client auth cert with:

       cc get_object_by_name ca host_key_cert 'Client Authentication certificate'|grep DirName

    Can anyone else move us further on this?

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hallo Christian,

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. Frowning2)

    The signing_ca for that cert was created when the UTM was first set up and there's no way to change it in WebAdmin.  When you generate a new client auth cert, the email address from the signing CA will be used.  I don't know how to replace that at the command line, but you can confirm this with:

         cc get_object_by_name ca signing_ca 'Client Authentication CA'|grep email

    You can see that CA is the one used by the client auth cert with:

       cc get_object_by_name ca host_key_cert 'Client Authentication certificate'|grep DirName

    Can anyone else move us further on this?

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML