Is it recommended to regenerate the WebGUI cert?



  • Hello

    I've been reading a lot of online texts where it is claimed that hardware devices generally lack entropy during boot process, and the entropy pool only accumulates later on. Out of curiosity I'd like to ask how does this affect the WebGUI SSL certificate that is seemingly auto-generated upon the first boot. Is it recommended to create a new CA/cert and replace the default one? I think that one of the older pfSense books suggested so.

    Thoughts?



  • I remake mine every morning…  Just to be sure.

    (kidding - no one should be seeing that except you.  It shouldn't matter if that interface is HTTPS or HTTP in my opinion. )


Log in to reply