Certificate expiring for web configurator - do I need to do anything?
-
I'm getting these warnings, will the system (SG-1100 with the most recent software update) automatically renew the certificate or do I need to trigger it? Thanks.
-
You don't need to do anything since the cert is self signed anyway. I does not auto-renew though you need to do that from the Certificate Manager to prevent those alerts.
Steve
-
See here : pfSEnse manual : Admin Access Tab
Execute this one :
pfSsh.php playback generateguicert
A new WebGUI cert will be generated, and set up to be sued by the https access of the GUI web server.
When visiting the GUI? your browser will "yell again" as it doesn't recognise the cert as 'valid' - it is self signed - and you have to make an exception, ones.
-
@gertjan The Renew option within the GUI won't do this?
-
@nguser6947 said in Certificate expiring for web configurator - do I need to do anything?:
The Renew option within the GUI won't do this?
If you have access to GUI, guess so yes.
-
If you renew the certificate in the GUI it keeps most of the attributes the same (DN info, key, etc) but updates the certificate.
If you use the CLI command mentioned above it creates and activates a completely new certificate for the GUI.
The renewal method is usually less of a pain in the long run, but the other method works as well if the GUI method isn't viable.