Messages

You're right that the SFTP upload automation exists in the "Automations" tab of the ACME plugin. However, my issue is that I need the public key to distribute it to my systems so that OPNSense can actually authenticate and upload the certificates via SFTP.

Since the expected directory /var/etc/acme-client/sftp-config/ is missing, I don't have access to the public key that should be used for authentication. Without this key, I can't configure my target systems properly to accept SFTP uploads from OPNSense.

Did you manually retrieve the public key somewhere, or was it automatically generated for you? Any insights would be appreciated! 😊

Hello everyone,

I'm trying to set up ACME SFTP automation on my OPNSense, but the folder /var/etc/acme-client/sftp-config does not exist. According to the documentation, this directory should contain the SFTP configuration and public key, but it's completely missing.

Without this folder, I don't have a public key for access. I tried manually creating the directory and uploading my own SSH key, but I'm not sure if this is the correct approach.

root@opnsense:/var/etc/acme-client # ll
total 28
drwxr-x---   3 root wheel 512 Jan 15 09:56 accounts/
drwxr-x---  15 root wheel 512 Jan 31 10:09 cert-home/
drwxr-x---  15 root wheel 512 Jan 31 10:09 certs/
drwxr-x---   2 root wheel 512 Jan 15 09:55 challenges/
drwxr-x---  15 root wheel 512 Jan 31 10:09 configs/
drwxr-x---   3 root wheel 512 Jan 15 10:11 home/
drwxr-x---  15 root wheel 512 Jan 31 10:09 keys/

Has anyone encountered this issue or found a solution to properly set up ACME SFTP access?

Thanks for your help! 😊

Hallo zusammen,

ich versuche, die ACME SFTP-Automation auf meiner OPNSense einzurichten, aber der Ordner /var/etc/acme-client/sftp-config existiert nicht. Laut Anleitung sollte sich dort die SFTP-Konfiguration samt Public Key befinden, aber das Verzeichnis fehlt komplett.

Ohne diesen Ordner habe ich auch keinen Public Key, den ich für den Zugriff nutzen könnte. Ich habe versucht, das Verzeichnis manuell zu erstellen und einen eigenen SSH-Key hochzuladen, aber ich bin unsicher, ob das der richtige Weg ist.

root@opnsense:/var/etc/acme-client # ll
total 28
drwxr-x---   3 root wheel 512 Jan 15 09:56 accounts/
drwxr-x---  15 root wheel 512 Jan 31 10:09 cert-home/
drwxr-x---  15 root wheel 512 Jan 31 10:09 certs/
drwxr-x---   2 root wheel 512 Jan 15 09:55 challenges/
drwxr-x---  15 root wheel 512 Jan 31 10:09 configs/
drwxr-x---   3 root wheel 512 Jan 15 10:11 home/
drwxr-x---  15 root wheel 512 Jan 31 10:09 keys/

Hat jemand das gleiche Problem oder eine Lösung, wie ich den ACME SFTP-Zugang korrekt einrichte?

Danke für eure Hilfe! 😊