I've got two linux machines with the latest webmin. One is Debian 6.0 and the other is CentOS 6.4.
I'm trying to create a new user account for webmin login and create a user certificate so I can turn off password logins (cert login only).
On both these systems, I can log in as the user with a password, over SSL/HTTPS. I've created the CA under the webmin configuration > CA Certificate.
When I try to create a User Certificate, I filled in all the fields (not sure if the email field must be specific or if it can be arbitrary), click create and it tells me to "Click Here to Download Your Certificate" and as soon as I do, the webpage acts like it's loading and I get a SSL Certificate error with the latest Firefox and the latest Chrome.
I see in the miniserv.users file that the user account I created a cert for has some extra fields in it specific to my input from my certificate form.
The website won't load for me until I edit the webmin config file (ssl=1 to ssl=0), then I can log in over http as the old user. I have to create a new user and delete the old one before it will let me create a certificate again.
I feel like the website is reauthorizing me using the newly updated certificate configuration before it lets me download the certificate. I think this is counterproductive since I can't get on the website until I download the certificate and I can't get the certificate till the website authenticates me.
Where does webmin store user certificates for re-downloading through SSH/SFTP?
Has anyone managed to get this working in a sane manner?
I don't even know what log to post to start with this one. If any more information can help let me know.
[link][1 comment]