Does Not Accept Elliptic Curve CA Signed Server Certificate

[gareththered]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• [X] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• [X] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Describe the bug

Importing a CA signed elliptic curve certificate to OpnSense results in "The certificate modulus does not match the signing request modulus."

To Reproduce

Steps to reproduce the behavior:

1. Go to 'System > Trust > Certificates'
2. Click on '+' to create a new certificate.
3. At the 'Method' drop-down select 'Create a Certificate Signing Request'
4. At the 'Key Type' drop-down select 'Elliptic Curve'
5. Enter a 'Common Name'
6. Click 'Save'
7. Click on 'update csr' and copy the CSR from the 'Signing request data' box.
8. Submit the CA (EJBCA) for signing.
9. Paste signed certificate into the 'Final certificate data' box.
10. Click 'Update' and notice the error message: "The certificate modulus does not match the signing request modulus."

Expected behavior

Certificate should be accepted.

Describe alternatives you considered

During step 4 above, select 'RSA' instead of 'Elliptic Curve'. The generated certificate is now accepted.

Relevant log files

Found nothing in the logs sadly.

Additional context

Saving both the CSR and certificate to a file and running them through openssl ..... -pubkey results in the same public key being displayed.

Environment

Software version: OPNsense 24.1.4 (amd64). Intel(R) Core(TM) i5-7400T CPU @ 2.40GHz (4 cores, 4 threads)