OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: Russellb on June 24, 2019, 04:26:10 pm

Title: How do I bypass the SSL certificate
Post by: Russellb on June 24, 2019, 04:26:10 pm

Hi All

I messed up the creation of a new SSl certificate for the WebGUI admin page and now I am locked out.  I also turned off SSH access.

How do I bypass HTTPS so that I can remove the faulty certificate and start again?

Thanks

Russellb

Title: Re: How do I bypass the SSL certificate
Post by: fabian on June 24, 2019, 06:00:03 pm

curl has a parameter "-k" or use a proxy that intercepts and supports invalid certificates. Or use VGA / RS232.

Title: Re: How do I bypass the SSL certificate
Post by: Russellb on June 24, 2019, 09:32:21 pm

Thanks Fabian
I will try the console via the serial port.

If logged in via the console, where do I find the web gui settings I would normally find under  System: Settings: Administration?  I assume I should then select HTTP instead of HTTPS?

Thanks

Title: Re: How do I bypass the SSL certificate
Post by: fabian on June 24, 2019, 09:50:25 pm

You cannot select the certificate there but if you change an interface, you can revert the web gui to HTTP.

Title: Re: How do I bypass the SSL certificate
Post by: Russellb on June 26, 2019, 10:26:22 am

Logging in via the console and reassigning the LAN interface did not seem to do the trick - still could not access the web gui.  I reset the firewall to factory defaults and then restored the config from a recent backup.

All back to normal (the importance of regular backups of the config file!) but my self signed SSL certificate is out of date - so back to the challenge of issuing a new one and using that to replace the old one, which is what caused my problem ion the first place.

Happy to receive guidance on that.