Messages

1

17.1 Legacy Series / Re: Let's Encrypt and HAProxy Integration

« on: June 24, 2017, 05:07:47 pm »

Not exactly. I gave up on the integration. It was not clear to me how it was supposed to work and I could not find a step by step anywhere, so I gave up on that.

I ended up having everything proxying to ports 80 and 443 so that Let's Encrypt functions and just have Let's Encrypt punch the holes to function.

2

17.1 Legacy Series / Re: Problem with Let's Encrypt plugin

« on: April 26, 2017, 02:35:18 am »

I can confirm @gs workaround worked for me as well.

3

17.1 Legacy Series / Re: Problem with Let's Encrypt plugin

« on: April 25, 2017, 03:32:16 pm »

Since I had so much trouble with the HAProxy HTTP Frontend integration, I tried the Port Forward option. It worked the first time. Any subsequent attempts, however, resembled the results that others in this thread are getting. No machines on my network can access the internet once I renew the cert. It appears that the different suggestions for getting connectivity back all work for me as well.

I am running the most recent versions of OPNsense (17.1.5) and os-acme-client (1.6).

4

17.1 Legacy Series / Re: Let's Encrypt and HAProxy Integration

« on: April 20, 2017, 05:55:27 am »

Here are a few more screenshots.

5

17.1 Legacy Series / Let's Encrypt and HAProxy Integration

« on: April 20, 2017, 05:54:06 am »

I'm running OPNsense 17.1.4 and everything that I have configured has been working great except for the Let's Encrypt and HAProxy integration.

I have the latest plugins installed for both. Let's Encrypt has generated its integration with HAProxy.

You can find the Acme Client log here: https://pastebin.com/j58JwNW1

I've attached some screenshots of my configuration. Basically, I am unable to get certificates because Let's Encrypt is unable to validate my domain.

Not sure what else I can provide at this time. I looked in the HAProxy logs, but there is nothing of relevance in there.

If someone could point me in the right direction, I would appreciate it.