<![CDATA[Can't remove broken Certificate Authority]]>After restoring my 2.5.0 pfsense firewall from fystical to a virtual machine (Proxmox) there is a problem with on of the Certificate Authorities. And a PHP error show up every time.

When I check my Certificate Authorities I can't select delete (the edit, export and delete icons are not there).

pfsense.jpg

Does anyone know how to remove this Certificate Authority ?

]]>https://forum.netgate.com/topic/172880/can-t-remove-broken-certificate-authorityRSS for NodeTue, 21 Apr 2026 01:49:52 GMTSat, 18 Jun 2022 13:32:12 GMT60<![CDATA[Reply to Can't remove broken Certificate Authority on Mon, 20 Jun 2022 09:39:32 GMT]]>@stephenw10

Yep, that's another possible issue : Installing a package (always the latest version) on a pfSense system that is not on the latest (2.6.0 if you use the free edition) version can work out fine.
More often it breaks stuff.

That's why :
If you decide NOT keep pfSense on the latest vesrion then you also decide not to upgrade / install packages any more.
Not respecting this rule is like playing with a six barrel gun and a bullet.
( we all saw the movie Deerhunter ones in our lives, right ? )

Read / click on the image :

0c26b335-292e-4d62-bafd-2840b0cfa267-image.png

Note : with some 'small' packages, like "Notes", you might get away with it.

When you see this :

6b4a7c6a-5366-4380-afa8-da3e98de2a03-image.png

and you see that huge stuff like php74 gets pulled in - and knowing that pfSense uses also php7x for it's WebGUI, I would consider that as a huge red flag.

]]>https://forum.netgate.com/post/1047331https://forum.netgate.com/post/1047331Mon, 20 Jun 2022 09:39:32 GMT<![CDATA[Reply to Can't remove broken Certificate Authority on Mon, 20 Jun 2022 09:24:16 GMT]]>I would guess that what happened here is when you restored the config it pulled in the acme package from 2.6 (the current stable version) and that broke some of the cert libs required.
If you need to do it again I would either install 2.6 directly or upgrade the VM to 2.6 before you restore the config.

Steve

]]>https://forum.netgate.com/post/1047330https://forum.netgate.com/post/1047330Mon, 20 Jun 2022 09:24:16 GMT<![CDATA[Reply to Can't remove broken Certificate Authority on Mon, 20 Jun 2022 08:54:56 GMT]]>@boumacor said in Can't remove broken Certificate Authority:

Any idea's how to fix this ?

And it's more easier as you think ;)
Use the very first trick that pfSense offers you : delete it using tools you trust and manage : a text editor (Install Notepad++).

Get a first complete config backup, put this is a safe place. If anything goes wrong, you will be back at where you started.
Get a second copy, open it using Notepadd++ an look for these (example) :

f2b6e998-9776-42fc-b5da-f680c2f43f4b-image.png

Delete your <ca> .... </ca>
You'll recognise it when looking at the description field.

Remember to respect leading tabs, spaces, whatever, do a clean cut.

Save the file.
Import it back in pfSense.
Have pfSense reboot.
Done.

]]>https://forum.netgate.com/post/1047327https://forum.netgate.com/post/1047327Mon, 20 Jun 2022 08:54:56 GMT<![CDATA[Reply to Can't remove broken Certificate Authority on Mon, 20 Jun 2022 08:28:42 GMT]]>@nollipfsense After a reboot the problem is the same. The 3 icons don't show. I've tryed 2 times.

@stephenw10 I didn't set the update branch to 2.5.0. Just used the 2.5.0 installer in my VM and then restored the configuration. Acme is already gone from the system, but now the CA seems to be the problem.

Any idea's how to fix this ?

]]>https://forum.netgate.com/post/1047326https://forum.netgate.com/post/1047326Mon, 20 Jun 2022 08:28:42 GMT<![CDATA[Reply to Can't remove broken Certificate Authority on Sat, 18 Jun 2022 23:25:46 GMT]]>Is the new VM also pfSense 2.5.0? Did you set the update branch to deprecated before installing acme if so?

Steve

]]>https://forum.netgate.com/post/1047227https://forum.netgate.com/post/1047227Sat, 18 Jun 2022 23:25:46 GMT<![CDATA[Reply to Can't remove broken Certificate Authority on Tue, 21 Jun 2022 02:25:14 GMT]]>@boumacor Had you tried reboot then immediately go to certificate after logging in, then see whether it allows you to delete?

]]>https://forum.netgate.com/post/1047211https://forum.netgate.com/post/1047211Tue, 21 Jun 2022 02:25:14 GMT