WebConfigurator default certificate expired yesterday
-
@adamf663 said in WebConfigurator default certificate expired yesterday:
generateguicert did nothing as I've said a couple of times.
It generates and puts in place a new cert with valid date boundaries.
Still, the new cert it signed by an authority that your browser doesn't trust.
That can be circumvented by importing the cert details into the 'database' of your system or browser. A working GUI is of course needed to do so.
Not the GUI, but the console access can stop https access to the GUI, if needed. Many forum posts explain what to do.I've just used t to generate a new cert, my Fifefox was still complaining of course, had to use the IPv4 of my pfSense, and got in after telling Firefox to allow an exception. So, the instructions work.
I was using the console access.The fact that browsers become more more picky every day is known.
Up to you to disable the https access to the GUI, or use really trusted certificates out of the box (brower's box).edit @johnpoz went down the same way, posted faster.
-
@Gertjan My ca goes out 10 years. The problem was with the server cert and generateguicert did nothing and didn't write any information.
-
pfSense shell:
playback generateguicert -
@Derelict I know this is old... I just wanted to thank you for the steps. Got me back up and running quick when a certificate was accidentally revoked. Thank you!
