ACME List of certificates is incomplete
-
Hello,
Everyday I receive an email from my pfsense stating that some certificates have or are about to expire. If I go in the the GUI, I see no certificates matching the names in the email. They are m, however, names that I remember using.
The list of certificates from the GUI matches the files found in /conf/acme
/cf/comf/config.xml, which also contains the certificates, lists thoses in /conf/acme AND others, including the ones that the email is complaining about.
How to delete the extra certificates if we can see them in the GUI?
-
@clauder so your saying there are certs listed in your xml, but no files exist for these certs?
You could download your xml, edit out the certs that are no longer valid or present and then reload the xml..
Under diagnostics you can do a download "backup" edit, and then restore.
-
The ACME package isn't sending you the e-mail, it's from the certificate manager. Only ACME certs are listed in the ACME package.
Check under System > Certificates on the CA and/or Certificates tab and you'll find the entries you are looking for.
