Skip to main content
live89
Explorer III
April 22, 2021
Question

FortiAuthenticator rejecting IIS generated CSR

  • April 22, 2021
  • 1 reply
  • 2494 views

Hi

 

We are facing this issue that the FAC is rejecting CSR generated from our IIS server, and giving this error message

Import has failed: module 'lib' has no attribute 'X509_delete_ext' 

If I generate the CSR let say from another OS , linux for example , or from F5, FGT.. the CSR is accepted successfully.

Fortinet TAC can't help on this, since they assume the problem is not on the FAC

Has anyone faced this issue before and managed to solve it?

 

Thanks

    1 reply

    infosecmatters
    New Member
    April 28, 2021

    I had the same issue with a CSR created by pfSense. I upgraded FortiAuthenticator to v6.3.0 and was able to generate a signed certificate from the CSR.