OPNsense Forum

Archive => 21.7 Legacy Series => Topic started by: jonm on August 18, 2021, 06:15:32 PM

Title: Certificate Web GUI SSL certificate is not intended for server use.
Post by: jonm on August 18, 2021, 06:15:32 PM
I've upgraded my test system today to 21.7.1 and I went in to System|Settings|Administration to enable ssh, when I click Save, I get the message in red: "Certificate Web GUI SSL certificate is not intended for server use."

What do I need to do to fix this please?

(As the test system is a clone of my live system I'm putting off the live upgrade for the time being until I know what this is about.)

Thanks in advance for any help :)

Jon.
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: Fright on August 18, 2021, 08:03:48 PM
try
# configctl webgui restart renew
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: jonm on August 18, 2021, 08:30:09 PM
Thanks, but... Problem is ssh is disabled and I can't enable it because of the error.
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: Fright on August 18, 2021, 08:50:34 PM
sorry )
if there is no access to the console, you can try to create an internal CA in SYSTEM: TRUST: AUTHORITIES. Then create a server certificate in SYSTEM: TRUST: CERTIFICATES. Then assign this certificate in SYSTEM: SETTINGS: ADMINISTRATION. after access to the SSH appears, you can continue to use the created cert or replace it with a self-signed one using the command above
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: jonm on August 18, 2021, 09:07:28 PM
Will give that a go in the morning. Appreciate the help, thank you.
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: jonm on August 19, 2021, 09:21:15 AM
Quote from: Fright on August 18, 2021, 08:03:48 PM
try
# configctl webgui restart renew

I was able to connect a keyboard and monitor, and I can confirm that this worked. Many thanks  :)
Title: Re: Certificate Web GUI SSL certificate is not intended for server use.
Post by: col360 on September 24, 2021, 12:43:52 PM
Quote from: Fright on August 18, 2021, 08:03:48 PM
try
# configctl webgui restart renew
I had the same issue and this fixed works. I had to select "Web GUI TLS Certificate" before clicking save.