Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
22.1 Legacy Series
»
www/nginx: Mutiple Cert entries of the same cert
« previous
next »
Print
Pages: [
1
]
Author
Topic: www/nginx: Mutiple Cert entries of the same cert (Read 1548 times)
DonSYS
Newbie
Posts: 11
Karma: 0
www/nginx: Mutiple Cert entries of the same cert
«
on:
March 30, 2022, 12:46:27 am »
Hello,
I have the problem that under certificate field in NGINX plugin like HTTP Server or Upstream.
The dropdown of the certificate is listing the same certificates couple of times and also some deleted certificates are still in the list although they are deleted under ACME Client.
I tried to dig in the files but never figured out the way NGINX plugin is calling the certificates and how they're populated.
I think that the certs are being displayed there multiple of times due to the renewal that is being regarded as multiple certs.
I tried to clean up the directories /usr/local/etc/nginx/key/ and /var/etc/acme-client/ where old certs are still there but that didn't help that NGINX plugin stop displaying multiple certs.
Any tip how I did ended up with that and how can i clean up the multiple entries?
Logged
DonSYS
Newbie
Posts: 11
Karma: 0
Re: www/nginx: Mutiple Cert entries of the same cert
«
Reply #1 on:
March 30, 2022, 03:11:45 am »
I ended up cleaning the doubled entries from
https://fw01.lkd70.com:8443/system_certmanager.php
It would still be great if the entries there got overwritten when the same cert got renewed.
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: www/nginx: Mutiple Cert entries of the same cert
«
Reply #2 on:
March 31, 2022, 01:08:48 pm »
Nginx plugin does get the certificates from the OPNsense core and does not directly interact with the acme plugin unless that it can intercept acme calls to handle the challenges.
Logged
DonSYS
Newbie
Posts: 11
Karma: 0
Re: www/nginx: Mutiple Cert entries of the same cert
«
Reply #3 on:
April 01, 2022, 02:41:29 am »
I figured this out later. But how does Nginx handle switching to the renewed certificate?
Given that NGINX will list all available certs from core including the renewed one.
Here Nginx will stick with the outdated cert, no?
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: www/nginx: Mutiple Cert entries of the same cert
«
Reply #4 on:
April 01, 2022, 01:24:14 pm »
The setup.php exports the selected certificates by ID. If you want to change it, you have to change the referenced record.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
22.1 Legacy Series
»
www/nginx: Mutiple Cert entries of the same cert