Lets Encrypt acme plugin - GUI problem

[thereaper]

Hi guys.

Plugin works fine, issued and applied cert using dns-01 validation via AWS.

When I navigate to Services / Let's Encrypt / Settings I see two tabs: Settings and Update Schedule.
If I press Update Schedule it bypasses the list view and opens Edit Job window straight away.
Whatever I press in Edit Job window, Cancel, the x top right button, GUI jumps back to Settings tab.

There is no way to see list of scheduled jobs.

Thanks for great plugin, btw :)  OPNsense 20.7.5-amd64
----------------------
Mini guide to use the os-acme-client plugin:

1. Install acme plugin.
1.1 Enter hostname and domain name in System: Settings: General
2. AWS setup
2.1 Create IAM Policy, appendix a.1
2.2 Create AWS IAM User
3. In OPNsense GUI / Services / Lets Encrypt :
3.1 / Accounts - add new, type name, email.
3.2 Press icon that looks like user - registers Letsencrypt account
3.3 / ChallengeTypes add new
    Challenge Type: dns-01 challenge
    DNS Service:m Route53
    Sleep Time: 30
    AWS ID / Secret: keys from step 2
4. Create certificate
4.1 Services: Let's Encrypt: Certificates make new certificate
    Common Name: hostname.domainname from step 1.1
4.2 Press Issue button (and tail -f /var/log/acme.sh.log)
5. Enable all
    Services: Let's Encrypt: Settings - Enable Plugin
    System: Settings: Administration:  SSL Certificate - select Letsencrypt one.

a.1 Policy
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "route53:GetHostedZone",
                "route53:ChangeResourceRecordSets",
                "route53:ListResourceRecordSets"
            ],
            "Resource": "arn:aws:route53:::hostedzone/ZZZZHHHFFFRRR"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "route53:ListHostedZones",
                "route53:GetHostedZoneCount",
                "route53:ListHostedZonesByName"
            ],
            "Resource": "*"
        }
    ]
}

[Fright]

There is no way to see list of scheduled jobs.

in fact, these are cron jobs (when you click "Update schedule" it opens cron job properties)
System-settings-Cron

[thereaper]

Indeed I see the job in System-settings-Cron, thanks.

How do I create another Lets Encrypt cron job? If I go Services / Let's Encrypt / Settings / Update schedule, the Edit Job popup appears, with the existing (first?) job already selected?

And how can I check the job, please? I can't find it in "crontab -l -u acme" and root's "crontab -l"...

[Fright]

20.7.5 uses new acme-client
i still use 20.7.4 with acme-client 1.0
but i think you still can add another cron job from cron gui (System-settings-Cron) : add new job and select "Renew Let's Encrypt certificates" in "command" drop-down
It checks all Let's Encrypt certificates, check dates, calculates update date and (if its time to update) updates cert.

And how can I check the job

if I understand correctly:
https://github.com/opnsense/plugins/blob/828ced9afaafd0991204020495502b0b84315d08/security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCertificate.php
you can see ""issue/renewal not required for certificate: " message in log even if cert renew not required (previous version did not. I made changes to the certhelper.php myself)

[thereaper]

20.7.5 uses new acme-client

I may be wrong, but I think fixing this auto opening of Edit Job popup is the way to go.

If I press Update Schedule it bypasses the list view and opens Edit Job window straight away.

[Fright]

I still think it's done well: since one job serves all the Let's Encrypt certificates and in most cases this is enough. anyone who wants to manage multiple cert jobs can do so through system-settings-cron