OPNsense Plugin
The Cert Warden Client OPNsense Plugin is a plguin to fetch a key and certificate from Cert Warden and to save them to an OPNsense firewall's Trust Store for use.
It can be downloaded at https://github.com/gregtwallace/certwarden-opnsense.
Installation
There is no repository available for this package, you must do a manual installation.
First, download the latest release.
The only file you need is the .pkg file (os-cert-warden-client-x.y.z.pkg
,
where x.y.z
is the version number). Then, copy the .pkg file to the firewall.
The final step is to run the command pkg install os-cert-warden-client-x.y.z.pkg
in the shell of the firewall.
Configuration
Configuration of the plugin should be reasonably straightforward. Settings
are located in the firwall menu Services > Cert Warden Client
. Each option
has help details within the firewall configuration page to explain its purpose.
(The Settings
page in v0.2.0.)
Save
saves the Settings
page.
Update Cert
queries Cert Warden and performs an update if needed.
Connection Test
verifies the plugin can reach the Cert Warden instance.
Unlink Certificate
breaks the connection between Cert Warden and the
certificate it updates in the Trust Store. This is useful if you want to
delete the certificate for some reason.
Ensure you Save
before clicking Update Cert
, otherwise the configuration
changes you made will not be used (the previous values will be used instead).