"The following CA/Certificate entries are expiring" message again
-
Dear Users,
about three weeks ago, I renewed the certificate for the webconfigurator using the command line that I found in some netgate forum topics.
But the same warning message appeared again.
3:01:00 The following CA/Certificate entries are expiring:
Certificate: webConfigurator default (61a2452bcc135) (61a2452bcc135): Expiring soon, in 14 daysIs there a different way to manage the webconfigurator certificate expiration?
What happens if this certificate expires? Pfsense will continue to work without any problem? -
@mauro-tridici said in "The following CA/Certificate entries are expiring" message again:
about three weeks ago, I renewed the certificate for the webconfigurator using the command line that I found in some netgate forum topics.
But the same warning message appeared again.What are de details of that certificate ?
@mauro-tridici said in "The following CA/Certificate entries are expiring" message again:
What happens if this certificate expires? Pfsense will continue to work without any problem?
If the date expire, the certificate becomes invalid.
I'm not sure if it will be possible to bypass that when you visit the GUI using a browser.Normally, its easy to renew : just click on the renew button of the certificate.
And check the validity end date : if it's still just 3 weeks, ditch the cert and create a new one that last a bit longer. -
If you used the CLI method that probably made a new cert and changed your GUI to use it.
It doesn't replace or remove the old cert, which is still there and expiring, and can now safely be removed because nothing is using it.
If you use the renewal method in the GUI then it renews the existing entry and doesn't require any extra steps.
-
@jimp your description fits my case exactly. Thank you very much, this solved my issue.
Have a great day,
Mauro
