Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
live89
Contributor

FortiAuthenticator rejecting IIS generated CSR

Hi

 

We are facing this issue that the FAC is rejecting CSR generated from our IIS server, and giving this error message

Import has failed: module 'lib' has no attribute 'X509_delete_ext' 

If I generate the CSR let say from another OS , linux for example , or from F5, FGT.. the CSR is accepted successfully.

Fortinet TAC can't help on this, since they assume the problem is not on the FAC

Has anyone faced this issue before and managed to solve it?

 

Thanks

Thanks

Thanks
1 REPLY 1
infosecmatters
New Contributor

I had the same issue with a CSR created by pfSense. I upgraded FortiAuthenticator to v6.3.0 and was able to generate a signed certificate from the CSR.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors