Blog

Pfsense Https V2

Planted April 12, 2023

Pfsense Https V2

Well, well, well, exactly 90 days later (the expiration date of the previous HTTPS certificate…) I had to dig in and manually renew the cert. I believe I’m the only one using it, so the impact was quite small.

This time, I started from the PfSense web GUI and just clicked “renew”. It took a really long time and I didn’t notice any popups when it was done. I eventually logged into the unit via ssh and found the log file with cat /tmp/acme/us-pfsense/acme_issuecert.log. Sure enough, the same error as last time. Previously, I killed the acme.sh process, then edited resolv.conf and restarted the acme.sh process. Today, I just edited resolv.conf to Google’s DNS (from Tailscale DNS, 100.100.100.100), and acme.sh took over and renewed the certificate for me.

Hopefully, in 3 months, this doesn’t happen again!