docusealco / docuseal

Open source DocuSign alternative. Create, fill, and sign digital documents ✍️
https://www.docuseal.co
GNU Affero General Public License v3.0
5.61k stars 372 forks source link

Unable to import self signed certificate generated with Adobe Acrobat Pro #178

Closed frerej closed 6 months ago

frerej commented 6 months ago

Hello,

I'm using Adobe Acrobat Pro version 2023.008 to generate a self signed .pfx certificate file, including a password.

When I try to import it to my self hosted Docuseal (on cloudron), I've got the message Password is invalid. Make sure you're uploading a valid .p12 file

Attached a test certificate + password file for testing purposes.

cert.zip

AlexandrToorchyn commented 6 months ago

@frerej I verified your example certificate using this command:

openssl pkcs12 -info -in test.pfx -noout -passin pass:12345678

Unfortunately, OpenSSL 3 doesn't support the legacy RC2-40-CBC algorithm

frerej commented 6 months ago

Hi @AlexandrToorchyn

Thank you for your assistance. Could you provide a workaround? Is there an OpenSSL command to generate a similar certificate without using the RC2-40-CBC algorithm? Alternatively, do you know if it's possible to use Adobe Acrobat Pro to create the certificate without employing the RC2-40-CBC algorithm?

The objective is to obtain a self-signed certificate with the key usage specified as 'Digital Signature'.

omohokcoj commented 6 months ago

@frerej here are some instructions regarding how to update your .pfx to a new format: https://github.com/docusealco/docuseal/issues/157#issuecomment-1861760266 Or you can just use openssl to create a self signed .p12 cert file.

frerej commented 6 months ago

@omohokcoj thank you! Is this step by step procedure generating a certificate including the 'Digital Signature' usage?

omohokcoj commented 6 months ago

@frerej yep it can be used to sign PDFs

frerej commented 6 months ago

@omohokcoj applied the procedure to a self generated Adobe Acrobat Pro certificate, everything works like a charm. Thank you!! docuseal