Community discussions

MikroTik App
 
sirkyllan
just joined
Topic Author
Posts: 2
Joined: Tue Jan 11, 2022 2:03 pm

Unable to create new certificate

Wed Feb 02, 2022 9:46 am

Hello to Everyone,
I'm using SSTP VPN and can't create new certificate for new user. When I try to generate a new certificate, I get locked windows in Winbox and all fields are grey out.

https://postimg.cc/5jj46F9Y
https://postimg.cc/t7dKRqWZ

Model: CCR1036-12G-4S
Winbox: 3.32
Ver. 7.1.1 (stable)

Many thanks.
 
tangent
Forum Guru
Forum Guru
Posts: 1390
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: Unable to create new certificate

Wed Feb 02, 2022 11:17 am

I tried to replicate that with a read-only user, but the "add certificate" (plus) button is disabled in that case, too. I couldn't make WinBox exhibit the symptom your screenshots show.

Until you get this fixed, can you work around it with the equivalent CLI commands? If those also don't work, the resulting errors might be enlightening.

Incidentally, I'd recommend getting off SSTP. Being tied to the obsolete SSL 3.0 protocol, it's vulnerable to the POODLE attack. Also, being firmly TCP-based, SSTP is subject to TCP meltdown.

Switching to WireGuard would solve both problems: simple random Base64 strings to copy around instead of complicated self-signed X.509 certificates, and UDP transport.
 
lgkahn
newbie
Posts: 28
Joined: Fri Mar 06, 2015 12:11 am

Re: Unable to create new certificate

Mon Jul 18, 2022 10:29 pm

same problem. i created two certif. took a break and now no fields other than name are enterable.. it is not a issue with winbox as same from anotyher machine.. something with the micrsotik hw itself.. trying a reboot now.. dont feel like doing the command line version.. please fix this.. otherwise i will just ease easy-rsa
 
lgkahn
newbie
Posts: 28
Joined: Fri Mar 06, 2015 12:11 am

Re: Unable to create new certificate

Mon Jul 18, 2022 10:30 pm

reboot of box fixed it
 
Deneb
just joined
Posts: 2
Joined: Tue May 29, 2018 4:55 pm
Location: Russian
Contact:

Re: Unable to create new certificate

Wed Mar 08, 2023 10:49 am

Got same problem on 7.8 with winbox 3.37
 
frog14
just joined
Posts: 11
Joined: Fri Aug 16, 2019 1:31 pm

Re: Unable to create new certificate

Thu Sep 14, 2023 8:32 am

Same here with OpenVPN :( Reboot fixes the issue.
ROS 7.11.2

Who is online

Users browsing this forum: No registered users and 46 guests