OPNsense Forum

English Forums => Virtual private networks => Topic started by: cdsane on October 15, 2024, 10:53:13 PM

Title: SSL Certificates
Post by: cdsane on October 15, 2024, 10:53:13 PM
Please anyone here who can help me with the appropriate way of installing certificates on OPNsense I need to install one for our wireGuard VPN
Title: Re: SSL Certificates
Post by: cookiemonster on October 15, 2024, 11:16:14 PM
You're not very clear if you are talking about OPN being the peer to connect to from a client on the WAN side, or as a peer connecting to an external wg provider.
The wg UI has a field for the public and private parts of a certificate.
Title: Re: SSL Certificates
Post by: Patrick M. Hausen on October 16, 2024, 07:10:55 AM
Wireguard does not use SSL certificates.
Title: Re: SSL Certificates
Post by: cookiemonster on October 16, 2024, 10:04:59 AM
yup. when I said public and private parts I muddled the terminology. Apologies for that.
Still the place to put those keys though.
Title: Re: SSL Certificates
Post by: cdsane on October 16, 2024, 11:24:30 AM
I think i didnt put my question right let me take it again
I have wireguard running on my opnsense I have configured a captive portal to log all users that connect to the wireguard VPN. I have also created a login page for the VPN so that users can login using the username password and token I (the administrator) provide for them.
Now this login page is what I want to use the SSL certificate for

This this explanation help
Title: Re: SSL Certificates
Post by: Patrick M. Hausen on October 16, 2024, 11:36:21 AM
Navigate to

System > Trust > Authorities

and create a certification authority. Export that cert and have all your users import it as trustworthy on their systems.

Then use this CA to create a certificate for your portal at

System > Trust > Certificates
Title: Re: SSL Certificates
Post by: cdsane on October 16, 2024, 01:10:39 PM
Thanks