<![CDATA[The following CA/Certificate entries are expiring: Certificate: GUI default ...]]>No doubt this is a terribly naive question, but should I expect the GUI certificate to be expiring, and if so, where ought I fetch an updated one?

]]>https://forum.netgate.com/topic/200061/the-following-ca-certificate-entries-are-expiring-certificate-gui-default-...RSS for NodeSat, 13 Jun 2026 03:09:49 GMTMon, 02 Feb 2026 05:38:53 GMT60<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Mon, 09 Feb 2026 02:52:35 GMT]]>@johnpoz with that music going haha

]]>https://forum.netgate.com/post/1237548https://forum.netgate.com/post/1237548Mon, 09 Feb 2026 02:52:35 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Sun, 08 Feb 2026 18:56:50 GMT]]>@JonathanLee said in The following CA/Certificate entries are expiring: Certificate: GUI default ...:

Like the movie Logan’s Run you know ?

haha - one of my favs..

Enter the Carousel. This is the time of renewal.

renewal.jpg

]]>https://forum.netgate.com/post/1237528https://forum.netgate.com/post/1237528Sun, 08 Feb 2026 18:56:50 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Sun, 08 Feb 2026 18:16:33 GMT]]>Yeah renew!!! Like the movie Logan’s Run you know ?

]]>https://forum.netgate.com/post/1237522https://forum.netgate.com/post/1237522Sun, 08 Feb 2026 18:16:33 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Mon, 02 Feb 2026 19:20:26 GMT]]>In addition per https://forum.netgate.com/post/1236652 they plan to auto-renew it in future versions.

]]>https://forum.netgate.com/post/1237126https://forum.netgate.com/post/1237126Mon, 02 Feb 2026 19:20:26 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Mon, 02 Feb 2026 19:03:28 GMT]]>@khb I concur that should prob be longer, but in a recent thread that some of these browser makers are getting a bit overly zealous if you will on even local type certs.

safari seems to have a limit of 825 days for even a local CA.. What I do is create my own ca, sign my pfsense gui cert with that ca that my browser trusts (firefox, and others) I don't use safari.

I set them for 10 years. I also put in the fqdn I am using, currently for my pfsense gui sg4860.home.arpa - yes I know its very creative and imaginative, hehehhe being currently its a netgate sg-4860 model..

I also put in the IP of my lan as SAN, so I can access via name or IP and my browser is happy and doesn't complain. And more than likely will have newer machine well before that cert expires ;)

cert.jpg

This one is good from 2024, when I changed over from using local.lan as my local domain to the approved home.arpa domain.

]]>https://forum.netgate.com/post/1237110https://forum.netgate.com/post/1237110Mon, 02 Feb 2026 19:03:28 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Mon, 02 Feb 2026 18:01:25 GMT]]>@SteveITS said in The following CA/Certificate entries are expiring: Certificate: GUI default ...:

https://docs.netgate.com/pfsense/en/latest/certificates/index.html

Thank you. While I appreciate the security upside of having external “things” certificates expire, what’s the benefit of this for the appliance's local GUI, especially since its self signed?

]]>https://forum.netgate.com/post/1237105https://forum.netgate.com/post/1237105Mon, 02 Feb 2026 18:01:25 GMT<![CDATA[Reply to The following CA/Certificate entries are expiring: Certificate: GUI default ... on Mon, 02 Feb 2026 06:57:59 GMT]]>@khb yes. You can just renew it. https://docs.netgate.com/pfsense/en/latest/certificates/index.html

]]>https://forum.netgate.com/post/1237077https://forum.netgate.com/post/1237077Mon, 02 Feb 2026 06:57:59 GMT