Import trusted certificate via shell

[oldjoe]

Hi,

I have a centralized Let's Encrypt server that manages multiple domains and would like to keep that setup separate as it involves quite a bit of automation.

Preferably I would like to migrate my current StrongSwan VPN server (running in a VM) along with its domain certificate into my awesome OPNsense desktop appliance so I could retire that VPN VM.

Is there a way to import the 3 cert files (certs/server-cert.pem, cacerts/chain.pem, private/server-key.pem) via SCP/API; import them from my VM managing the certificates? And have that import setup on a schedule that would be available to the OPNsense IPsec VPN service in an automated fashion?

Thanks in advance!

[bartjsmit]

I wrote a script for that https://github.com/bartsmit/distcerts

[oldjoe]

That is so awesome - Thanks a lot for sharing bartjsmit! Will try it out