P12 Certificate "errno:-17011"

jef

I have been importing P12 certificates for years.
It is scripted openssl to generate pkcs12 from PEM files.
openssl has not updated on linux since 2020.

Now the "import" under "certificates" gets error 'error -17011'.
"errmsg: PKI certificate type is not supported"

Tried a different browser, chrome and firefox both error.

Import certificate still states that Binary PKCS#12 is supported.
Did Zyxel break the certificate imports?

I can validate my p12 file with openssl, so the file is fine.

jef

Patched and Imported. Thank you!!

jef

jef

Testing, I used a p12 file from Oct 2023 (expired).
The same p12 file that loaded into the zywall in Oct 2023.
That same p12 file now fails.
Which is proof that Zyxel broke the software for USG Flex 700.

Can we get an emergency fix.

Zyxel_James

@jef We have this fix in 5.37P1-WK03 firmware, I will provide it via private message, please check your inbox, thanks.

jef

Patched and Imported. Thank you!!

MichalZ

Hi. I am having the same issue right now with version V5.39(ABWD.1). Same error.