Skip to content

Conversation

@gabrielg5
Copy link
Collaborator

This PR fixes #2054

Exception was triggered because the username was set as the CommonName of the CSR.
When the username was not given (coerced machine account) that exception was being triggered

Updated CSR generation to only set CN when it exists
Enhanced certificate name to also consider these scenarios where username is missing

@anadrianmanrique anadrianmanrique self-assigned this Oct 13, 2025
@anadrianmanrique anadrianmanrique added the bug Unexpected problem or unintended behavior label Oct 14, 2025
@Dfte
Copy link
Contributor

Dfte commented Oct 15, 2025

Hey mate! Sorry for being afk for a while! I'll definitely check that out tomorrow and let you know if it fixes my case! Thanks !

@Dfte
Copy link
Contributor

Dfte commented Oct 16, 2025

Perfect mate :D!

image

@anadrianmanrique anadrianmanrique merged commit 1f77e78 into master Oct 16, 2025
10 checks passed
@anadrianmanrique
Copy link
Collaborator

tested ADCS through HTTP with a coerced local account. working ok
tested ADCS though RPC with a domain user. working ok
merging now, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Unexpected problem or unintended behavior

Projects

None yet

Development

Successfully merging this pull request may close these issues.

NTLMRelayx ADCS via ntlm_reflection is broken

4 participants