Error trying to add a Certificate for FTP

angrymasther

Cadet
Joined
Mar 13, 2023
Messages
1
Hardware:
  • Motherboard: Supermicro X9DRi-LN4+/X9DR3-LN4+
  • CPU: Intel (R) Xeon(R) CPU E5-2697 v2
  • RAM: 504 GiB
  • DISKs: 26 6TB HDD
  • Ethernet: Mellanox Technologies MT27520
Im trying to enable the TLS in my Truenas Scale (22.02.4) FTP service. Im importing the CSR, pasting the csr in Signing Request and the key in private key.
When select the CSR in the FTP options throw me the next error.

Code:
Error: Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 177, in call_method
    result = await self.middleware._call(message['method'], serviceobj, methodobj, params, app=self)
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1294, in _call
    return await methodobj(*prepared_call.args)
  File "/usr/lib/python3/dist-packages/middlewared/service.py", line 574, in update
    rv = await self.middleware._call(
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1294, in _call
    return await methodobj(*prepared_call.args)
  File "/usr/lib/python3/dist-packages/middlewared/schema.py", line 1272, in nf
    return await func(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/middlewared/schema.py", line 1140, in nf
    res = await f(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/middlewared/plugins/ftp.py", line 209, in do_update
    verrors.extend((await self.middleware.call(
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1345, in call
    return await self._call(
  File "/usr/lib/python3/dist-packages/middlewared/main.py", line 1294, in _call
    return await methodobj(*prepared_call.args)
  File "/usr/lib/python3/dist-packages/middlewared/plugins/crypto_/certificates.py", line 121, in cert_services_validation
    if cert['digest_algorithm'] in ['MD5', 'SHA1']:
KeyError: 'digest_algorithm'
 

danb35

Hall of Famer
Joined
Aug 16, 2011
Messages
15,504
Looks like your CSR is using either MD5 or SHA1 as a hash algorithm, both of which are long since deprecated. SHA256 is the currently-preferred recommendation.
 
Top