Skip to main content
MG4
Explorer III
March 12, 2025
Question

Redundant subject field verification for PKI-Users on the FortiGate 7.4.7

  • March 12, 2025
  • 2 replies
  • 674 views

Hello everyone,


I have noticed that there is a redundant entry in the Administration Guide (https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/443323/dialup-ipsec-vpn-with-certificate-authentication). It appears that the subject field of the certificate can be verified in two ways: once with "set subject" and once with "set cn" along with "set cn-type". However, "set cn" and "set cn-type" can only be configured via the CLI.


Is there a specific reason for this redundancy?

2 replies

Stephen_G
Moderator
Moderator
March 16, 2025

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Stephen_G - Fortinet Community Team
Stephen_G
Moderator
Moderator
March 19, 2025

Hi,

 

We're still looking for an answers or help. In the meantime, if anyone has any input on the topic, it's very welcome!

Stephen_G - Fortinet Community Team