<![CDATA[Certificate Error Expired]]>Getting this is the GUI

Certificate Manager

The following CA/Certificate entries are expiring:
Certificate: webConfigurator default (5572f4715149c) (5572f4715149c): Expired 85 days ago @ 2021-02-20 03:01:00
]]>https://forum.netgate.com/topic/161168/certificate-error-expiredRSS for NodeMon, 20 Apr 2026 04:28:46 GMTSat, 20 Feb 2021 21:53:25 GMT60<![CDATA[Reply to Certificate Error Expired on Sat, 13 Mar 2021 10:49:59 GMT]]>huh? Why/How would unbound be using the webgui cert? Just because its listed there in a "possible" cert you could use if you enabled dot in unbound to use for people that query it - doesn't mean its actually used..

dot.png

You sure wouldn't want it using your default selfsigned webgui cert..

]]>https://forum.netgate.com/post/972171https://forum.netgate.com/post/972171Sat, 13 Mar 2021 10:49:59 GMT<![CDATA[Reply to Certificate Error Expired on Fri, 12 Mar 2021 23:59:21 GMT]]>Just a heads up that I ran into an issue of Unbound not starting after updating the GUI certificate. To fix it I had to go into the Unbound settings and click save after updating the certificate. The Unbound settings had already selected the new certificate automatically (it was the only one on the system), but apparently the settings needed to be saved in order to get unbound up and running again.

]]>https://forum.netgate.com/post/972142https://forum.netgate.com/post/972142Fri, 12 Mar 2021 23:59:21 GMT<![CDATA[Reply to Certificate Error Expired on Tue, 23 Feb 2021 17:57:22 GMT]]>@cool_corona
Just pay it forward.

I tried about every combination of options in the GUI and it always errored out. I expect that's because I've updated/restored so many times. The cert probably dated back to 2.0 if not 1.2.3

]]>https://forum.netgate.com/post/967234https://forum.netgate.com/post/967234Tue, 23 Feb 2021 17:57:22 GMT<![CDATA[Reply to Certificate Error Expired on Tue, 23 Feb 2021 17:39:47 GMT]]>@dotdash You are the best! Couldnt get it to work in FF before this... no matter what.

Had to revert to IE to get it going in the GUI. Until now.

Where shall I send my gratitude??

]]>https://forum.netgate.com/post/967228https://forum.netgate.com/post/967228Tue, 23 Feb 2021 17:39:47 GMT<![CDATA[Reply to Certificate Error Expired on Tue, 23 Feb 2021 17:30:45 GMT]]>@jimp Tried the GUI to renew the certificate but it errored out. The console playback script worked just fine.

I had a related problem where one of the old certificates I deleted was assigned to Unbound. Unbound crashed until I assigned it the newly created GUI cert and restarted the service.

]]>https://forum.netgate.com/post/967226https://forum.netgate.com/post/967226Tue, 23 Feb 2021 17:30:45 GMT<![CDATA[Reply to Certificate Error Expired on Tue, 23 Feb 2021 17:02:06 GMT]]>In 2.5.0 you can also renew certificates in the GUI, but for the default GUI cert it's probably better to create a fresh one using that script.

]]>https://forum.netgate.com/post/967204https://forum.netgate.com/post/967204Tue, 23 Feb 2021 17:02:06 GMT<![CDATA[Reply to Certificate Error Expired on Mon, 22 Feb 2021 16:57:06 GMT]]>@dotdash Thanks - this worked for me as I had the exact same issue across four systems after update to 2102.

]]>https://forum.netgate.com/post/966771https://forum.netgate.com/post/966771Mon, 22 Feb 2021 16:57:06 GMT<![CDATA[Reply to Certificate Error Expired on Mon, 22 Feb 2021 13:40:26 GMT]]>@cool_corona
I also started getting warnings about the webconfigurator cert being expired after updating to 2.5. I wasn't able to get the renew option in the cert manager to work, so I did it via the menu (console/ssh).
Go to option 12 from the menu, then type
playback generateguicert
when it finishes, type exit.
I then went back into cert manager and deleted the old cert.

]]>https://forum.netgate.com/post/966642https://forum.netgate.com/post/966642Mon, 22 Feb 2021 13:40:26 GMT