Print Page - How do I bypass the SSL certificate

Title: How do I bypass the SSL certificate
Post by: Russellb on June 24, 2019, 04:26:10 PM

Hi All

I messed up the creation of a new SSl certificate for the WebGUI admin page and now I am locked out. I also turned off SSH access.

How do I bypass HTTPS so that I can remove the faulty certificate and start again?

Thanks

Russellb

Title: Re: How do I bypass the SSL certificate
Post by: fabian on June 24, 2019, 06:00:03 PM

curl has a parameter "-k" or use a proxy that intercepts and supports invalid certificates. Or use VGA / RS232.

Title: Re: How do I bypass the SSL certificate
Post by: Russellb on June 24, 2019, 09:32:21 PM

Thanks Fabian
I will try the console via the serial port.

If logged in via the console, where do I find the web gui settings I would normally find under System: Settings: Administration? I assume I should then select HTTP instead of HTTPS?

Thanks

Title: Re: How do I bypass the SSL certificate
Post by: fabian on June 24, 2019, 09:50:25 PM

You cannot select the certificate there but if you change an interface, you can revert the web gui to HTTP.

Title: Re: How do I bypass the SSL certificate
Post by: Russellb on June 26, 2019, 10:26:22 AM

Logging in via the console and reassigning the LAN interface did not seem to do the trick - still could not access the web gui. I reset the firewall to factory defaults and then restored the config from a recent backup.

All back to normal (the importance of regular backups of the config file!) but my self signed SSL certificate is out of date - so back to the challenge of issuing a new one and using that to replace the old one, which is what caused my problem ion the first place.

Happy to receive guidance on that.

OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: Russellb on June 24, 2019, 04:26:10 PM