How can I import from the cli an externally generated SSL certificate?

[sja1440]

Using the CLI, is it possible to import an externally generated SSL certificate for use in System: Settings: Administration->SSL Certificate?

I have looked but I cannot find an API endpoint to do this.

Since I believe that the certificates used by the GUI are kept in the conf.xml,  maybe there any some specialised OPNsense shell commands that could be used to manipulate the certificate nodes in the xml? If so what are they? (I do not want to manipulate directly the xml).

Can somebody suggest a way of doing this?

 

[0zzy]

Take a look in https://forum.opnsense.org/index.php?topic=15139.msg69118#msg69118 eventually it solved your problem.

[sja1440]

Thanks for the suggestion, but as I said I do not wish to manipulate directly config.xml because that is in internal file and who knows how it is used internally by OPNsense.

[Fright]

wait for https://github.com/opnsense/core/issues/7248 maybe?)

[sja1440]

 Thankyou. That's good news. So that's what "system: move Trust section to MVC/API" meant!