CA with let's Encrypt ?

[vikozo]

Hello

for doing a VPN you have to do a CA.
It is better to do it at this place
VPN: OpenVPN: Servers: Certificate Authority Selection

or should the
Services: Let's Encrypt: Settings

be used?

have a nice day
vinc

[rainerle]

Hi,

for a CA used in OpenVPN you should never use a Let's Encrypt Zertifikate.

See https://redmine.pfsense.org/issues/8281

You will have to anyway configure the OpenVPN Clients with the server's CA. Just use the OPNsense OpenVPN wizard to let it create a proper private CA and certificate.

Cheers
Rainer

[vikozo]

@rainerle
thanks for your Feedback.

so what is the Purpose of Let's Encrypt on the opnSense?

have a nice day
vinc

[rainerle]

Hi,

I am using it for IPsec IKEv2 Mobile clients. The client then only requires user ID and password.

Other use cases are Haproxy SSL offloader or even web services directly hosted on the OPNsense.

Best regards
Rainer