From ae79adb142d2cec8c287ea700bb4810ef7b82003 Mon Sep 17 00:00:00 2001 From: Andreas Stuerz Date: Tue, 2 Mar 2021 13:52:50 +0100 Subject: [PATCH] local cert serial hex numebr should contain leading zero to fill up the missing octet. --- .../src/opnsense/scripts/OPNsense/HAProxy/syncCerts.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/net/haproxy/src/opnsense/scripts/OPNsense/HAProxy/syncCerts.py b/net/haproxy/src/opnsense/scripts/OPNsense/HAProxy/syncCerts.py index 41df2cbba..8d48a1e20 100755 --- a/net/haproxy/src/opnsense/scripts/OPNsense/HAProxy/syncCerts.py +++ b/net/haproxy/src/opnsense/scripts/OPNsense/HAProxy/syncCerts.py @@ -544,8 +544,15 @@ class Cert(SyncWithTarget): def _get_local_state(self): cert_obj = self._get_cert_data() + serial = cert_obj.get_serial_number() + serial_hex = "%X" % serial + + if len(serial_hex) % 2 != 0: + padding = len(serial_hex) + 1 + serial_hex = f"%.{padding}X" % serial + return { - "Serial": '%.2x'.upper() % cert_obj.get_serial_number(), + "Serial": serial_hex, "Subject": self._glue(cert_obj.get_subject().get_components()), "Issuer": self._glue(cert_obj.get_issuer().get_components()) }