Hello to Everyone,
I’m using SSTP VPN and can’t create new certificate for new user. When I try to generate a new certificate, I get locked windows in Winbox and all fields are grey out.
I tried to replicate that with a read-only user, but the “add certificate” (plus) button is disabled in that case, too. I couldn’t make WinBox exhibit the symptom your screenshots show.
Until you get this fixed, can you work around it with the equivalent CLI commands? If those also don’t work, the resulting errors might be enlightening.
Incidentally, I’d recommend getting off SSTP. Being tied to the obsolete SSL 3.0 protocol, it’s vulnerable to the POODLE attack. Also, being firmly TCP-based, SSTP is subject to TCP meltdown.
Switching to WireGuard would solve both problems: simple random Base64 strings to copy around instead of complicated self-signed X.509 certificates, and UDP transport.
same problem. i created two certif. took a break and now no fields other than name are enterable.. it is not a issue with winbox as same from anotyher machine.. something with the micrsotik hw itself.. trying a reboot now.. dont feel like doing the command line version.. please fix this.. otherwise i will just ease easy-rsa