associating user and certificate

[burghy86]

Hello. I have updated OPNsense to the latest version 24.7. I have a problem associating a certificate with the local user. When I click "+" on "user certificate," it takes me to the "trust" section, and the tab to create a new certificate opens. In that section, I cannot choose an already created one, and if I create a new certificate, it still remains unused.

how to associate openvpnclient certificate and export ovpn config file with a correct certificate?

To Reproduce

Steps to reproduce the behavior:

1. Go to 'user'
2. Click on 'root' and edit
3. click + on user certificates
4. is not possibile associaton trust and user

Versions
OPNsense 24.7.3_1-amd64
FreeBSD 14.1-RELEASE-p3
OpenSSL 3.0.14

[OPNsense-bot]

Thank you for creating an issue.
Since the ticket doesn't seem to be using one of our templates, we're marking this issue as low priority until further notice.

For more information about the policies for this repository,
please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.

The easiest option to gain traction is to close this ticket and open a new one using one of our templates.

[burghy86]

I've read the other issues. I understand that you need to create a certificate with the same name as the user, and then it auto-associates. It's not very clear, but it's fine; I've tried it, and it works great. It will definitely be a problem if I want multiple certificates for the same user

[jl-stellar]

This is a really big step back in usability.

[fichtner]

CNs must match, certificates are not "manually" linked... it was said elsewhere a few times now.

[chimmmpie]

https://forum.opnsense.org/index.php?topic=43306.0

[burghy86]

With the older versions of OPNsense, I have users linked to the Windows LDAP domain. If the users are part of the _vpn group, then they can connect. However, there is only one certificate. Will this still be possible?

[AdSchellevis]

With the older versions of OPNsense, I have users linked to the Windows LDAP domain. If the users are part of the _vpn group, then they can connect. However, there is only one certificate. Will this still be possible?

yes, nothing changed with the group membership checks.