Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Getting PKCS #12 format from acme plugin
« previous
next »
Print
Pages: [
1
]
Author
Topic: Getting PKCS #12 format from acme plugin (Read 133 times)
charles.adams
Newbie
Posts: 21
Karma: 0
Getting PKCS #12 format from acme plugin
«
on:
October 26, 2024, 12:17:09 am »
I'm trying to get a PKCS #12 (a .pfx) out of the ACME plugin while using Lets Encrypt. I want this as several of my jails such as Emby/Jellyfin/Plex need a cert file that contains both keys and have a password set.
I've gotten the built in automation for sending the cert working via the TrueNAS API for the NAS host and I want to use SFTP automation to send the cert to each jail.
However, I'm struggling to find a way to either customize the way that the acme.sh is called so that I can specify a password or set a flag to also output a .pfx in addition to the .pem it currently generates.
Is there a way to accomplish this short of using the SFTP to transfer the cert to the FreeBSD jail and then the remote SSH automation to send a openssl command to convert the .pem and .key into a .pfx with a password?
Logged
cookiemonster
Hero Member
Posts: 1823
Karma: 95
Re: Getting PKCS #12 format from acme plugin
«
Reply #1 on:
October 27, 2024, 09:54:55 pm »
You have two things going: combined chain certs into one AND certificate format (pfx or pem or another). pfx are ususally for windows machines.
That out of the way, to my knowledge there is no built-in method in OPN to output in different formats. As to the ACME plugin, don't know either.
At this point you're wondering how is this helpful.
What I want to say is that your best IMHO of moving this requirement along is to script the combination and conversion if actually required. You need the openssl tool (included in OPN).
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Getting PKCS #12 format from acme plugin