Guide: How to Manage Certificates on OPNsense

[beki]

Dear OPNsense Community,

Certificates on OPNsense are used to establish confidence between peers. OPNsense enables the creation of certificates directly from the front end to simplify their use. Furthermore, it enables the creation of certificates for many uses without using the "openssl" command line program.

In this guide, we outline OPNsense certificate management topics.
https://www.zenarmor.com/docs/network-security-tutorials/how-to-manage-certificates-on-opnsense

Best Regards,

Zenarmor Team

[p_kn]

Is there any chance to automate the import of a certificate for the webgui? We use acme.sh to generate certificates regularly. In our whole network, OPNsense is the only serveice where we have to deploy manually into a web form. Is there any chance to to this vis SSH?

[Monviech (Cedrik)]

You can check out the current developement edition of the OPNsense. There is a rewritten API enabled trust store in it now as technology preview.

[p_kn]

Ah, great, thank You! the new API endpoint `/ui/trust/cert` looks promising. I'll try to make a python script for this API endpoint.