star certificates

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
Pierck
Messages: 4
Registration: June 17, 2020 - 3:13 PM

June 17, 2020 - 3:24 PM

Hello,
in my company, we have a certificate with the character *. I would like to use it in WAPT.
The integration with nginx doesn't pose any particular problem. However, when I try to retrieve the certificate from the WAPT console,
the file format is incorrect (unable to create file ..."C:\program Files(x86)\..\*.my_domain.fr.crt").
Windows doesn't support this character, which is normal.

Would it be possible to convert it to "star.my_domain.fr.crt" or some other workaround?

Thank you.
Pierck
Messages: 4
Registration: June 17, 2020 - 3:13 PM

June 17, 2020 - 3:28 PM

I forgot to mention:
tests performed with:
server: WAPT1.8.2 under CentOS 7.8;
consoles: Windows Server 2016
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

June 17, 2020 - 11:01 PM

Could you be more specific about the phrase "However, when I try to retrieve the certificate from the WAPT console," (which button)? If it's a valid commercial certificate, it should be recognized without needing to pin it. If the console actually creates a file with an asterisk in it when you try to pin it, that's definitely a bug. But pinning is normally done with a specific server, not a wildcard.
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Pierck
Messages: 4
Registration: June 17, 2020 - 3:13 PM

June 18, 2020 - 08:15

This message appears when I go to the preferences of the Amin console, and I click on "retrieving the HTTP server certificate"
Pierck
Messages: 4
Registration: June 17, 2020 - 3:13 PM

July 7, 2020 - 2:24 PM

Hello,
I didn't understand if I need to give you more details or if you're already considering my question?
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

July 8, 2020 - 12:09

Hi Pierck,

if the certificate is a commercial certificate, it should be recognized with the python-certifi bundle. Pinning can indeed provide additional security. If it's an internal certificate authority, it's cleaner to create one certificate per server.

Importing the pinning through the interface doesn't work, but if you import your bundle manually, it should. The WAPT console's preferences menu will still indicate that it's not working, but it will run in the background.

If you have a WAPT commercial contract and this bug is important to you, you can contact Camille to have it prioritized. Alternatively, you can also submit a pull request on the WAPT GitHub repository.

Best regards,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Locked