topic Re: Certificate creation - unable to export CSR in General Topics

Certificate creation - unable to export CSR

darren_g — Thu, 24 May 2018 23:34:48 GMT

Folks.

I'm trying to generate a CSR for a new security certificate for one of my firewalls.

I can generate the CSR just fine. it shows int he certificate list as "pending". Which is what I expect.

What I can't do it export the CSR. I select it, click "export" from the action options, and the screen just blanks for a few seconds and goes back to where I started.

This happens if the config holding the pending certificate is committed or not.

Has anyone seen this and know how the heck I can get the CSR out of the box to give to the CA for certificate generation?

Box is a 3020 running 7.1.17

Thanks to anyone who can help

Re: Certificate creation - unable to export CSR

BPry — Thu, 24 May 2018 23:38:45 GMT

@darren_g,

If you export the XML configuration you'll see the actual CSR in the running-config.xml.

Re: Certificate creation - unable to export CSR

darren_g — Thu, 24 May 2018 23:51:25 GMT

@BPry wrote:
@darren_g,
If you export the XML configuration you'll see the actual CSR in the running-config.xml.

You, Sir, are an absolute legend! That did the trick. Thanks!

Re: Certificate creation - unable to export CSR

Anon1 — Fri, 25 May 2018 17:06:36 GMT

This is a known bug and fixed in 8.0.10

PAN-88388

Fixed an issue where you could not export certificates when you accessed the firewall web interface through a browser that ran Firefox v56 or later or ran Chrome v66 or later (DeviceCertificate ManagementCertificatesDevice Certificates).

With Internet Explorer it works.