Ability to copy certificate/key in PEM format would be nice

chris.ett

Just a suggestion: It's common to need to copy certificates and/or keys in PEM format. This is doable for CAs because you can edit the CA and the cert/key are right there in text boxes. However unless I am missing something this is not possible for regular certificates. You only have the option to download them as files. I realize the downloads are in PEM format and I can just download/open in an editor. This is not a big deal if you only need to do it once, but doing this for 20+ certificates is quite tedious.

jimp

You can do that on 2.5.0

See https://github.com/pfsense/pfsense/commit/967733529244944d751003517a1e42fba1b29c07

https://redmine.pfsense.org/issues/7861
https://redmine.pfsense.org/issues/1192

lrossi

I know this thread is old but i'm in the same situation as @chris-ett and didn't think another thread would be helpful.

I created a CA in pfsense which i use to create the certificates/keys for local services in my network. My new addition is a sever with IPMI.

Obviously, i want to use the certificates from pfsense. The IPMI interface wants the certificates in ".cert" and the keys in ".pem" but pfsense creates files with extensions "crt" & "key" respectively.

How can i export the certificate and keys from pfsense in the format that i need?

I know @jimp said it can already be done but the links provided points to a github with information that means very little to me. Is there a resource that shows how to achieve this intent from the pfsense web interface?

jimp

Those are just file extensions, the .crt and .key files exported from the GUI are in PEM format. If whatever you are copying them to insists on specific extensions, just rename the files to match.

You would only need to worry about conversion if they wanted the keys in a different format like DER or PKCS#12.

Either way it's not relevant to this thread, as this thread is only about being able to copy/paste the contents of the certificate in the GUI rather than downloading the files. Either way is still PEM format.

lrossi

@jimp I apologize for resurrecting a thread that was not relevant to my particular issue (that should tell you a thing or two about how much i know about this) but at the same time i want to thank you for the suggestion.

Changing the file extension worked right away and my issue is resolved.