Print Page - How can I import from the cli an externally generated SSL certificate?

Title: How can I import from the cli an externally generated SSL certificate?
Post by: sja1440 on March 08, 2024, 04:01:12 PM

Using the CLI, is it possible to import an externally generated SSL certificate for use in System: Settings: Administration->SSL Certificate?

I have looked but I cannot find an API endpoint to do this.

Since I believe that the certificates used by the GUI are kept in the conf.xml, maybe there any some specialised OPNsense shell commands that could be used to manipulate the certificate nodes in the xml? If so what are they? (I do not want to manipulate directly the xml).

Can somebody suggest a way of doing this?

Title: Re: How can I import from the cli an externally generated SSL certificate?
Post by: 0zzy on March 08, 2024, 04:21:36 PM

Take a look in https://forum.opnsense.org/index.php?topic=15139.msg69118#msg69118 eventually it solved your problem.

Title: Re: How can I import from the cli an externally generated SSL certificate?
Post by: sja1440 on March 08, 2024, 04:33:10 PM

Thanks for the suggestion, but as I said I do not wish to manipulate directly config.xml because that is in internal file and who knows how it is used internally by OPNsense.

Title: Re: How can I import from the cli an externally generated SSL certificate?
Post by: Fright on March 08, 2024, 06:36:10 PM

wait for https://github.com/opnsense/core/issues/7248 maybe?)

Title: Re: How can I import from the cli an externally generated SSL certificate?
Post by: sja1440 on March 08, 2024, 06:51:11 PM

Thankyou. That's good news. So that's what "system: move Trust section to MVC/API" meant!

OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: sja1440 on March 08, 2024, 04:01:12 PM