Skip to content

webapp must use certificate_authority 0.2.0

we require version 0.2.0 of the gem certificate_authority. this version has not been uploaded to rubygems, so we need to vendor it from this git repo https://github.com/cchandler/certificate_authority

until this is changed, the webapp will generate client certs with this for the issuer field:

CN=Bitmask Root CA (client certificates only!), O=Bitmask, OU=https://bitmask.net

This is the wrong order, and will cause OpenVPN to hang forever.

The issuer for client certs should be:

O=Bitmask, OU=https://bitmask.net, CN=Bitmask Root CA (client certificates only!)

version 0.2.0 of certificate_authority will generate the correct issuer. i do not know if there is a "proper" order for these certificate attributes that compose the distinguished name. in certificate_authority the order is hard coded, but has recently been switched around with the comment "order matters". thanks. the openssl library will generate dn strings in whatever order you give it.

(from redmine: created on 2013-02-06, closed on 2013-02-09)