How to Install Certificates from PFsense to other servers?

[Gertjan]

@Bronko

You 'chmod x' the script file as executable ?

(noop, you won't escape from the console or better, SSH )

[Bronko]

@Gertjan said in How to Install Certificates from PFsense to other servers?:

Be aware : we don't know nothing about the shell session used to fire up the actions.

given by that, used the GUI for file creation and chmod 755 (check picture)

[Bronko]

@Bronko said in How to Install Certificates from PFsense to other servers?:

But I have an issue regarding to copy certificates to more then one server in Action list:

I have found the missing step:

If you don't use the standard 'admin' group member of 'admins' like me to login into pfsense, you have to extend
/root/.ssh/known_hosts by your target hosts from /home/USER/.ssh/known_hosts given by the fact, Actions list jobs running in root context... My fault.

Thanks for all your response.

[mwebb]

@Bronko Suggest to test if .ssh subfolders are persistent after reboot of each machine. FreeBSD typically purges them at reboot. Might need to run a script at boot time to recover them or run script each time you copy the scripts with following options to recreate / ignore the known hosts automatically: scp -o UserKnownHostsFile=/dev/null -o StrictHostKeychecking=no -i /root/.ssh/id_rsa <user>@<cert store host>:/<script>

[Bronko]

@mwebb said in How to Install Certificates from PFsense to other servers?:

Suggest to test if .ssh subfolders are persistent after reboot

at pfsense they are persistent