Re: [pfSense] Web GUI certs

2014-05-22 Thread Olivier Mascia
Le 22 mai 2014 à 04:04, Volker Kuhlmann a écrit : > What exactly should I be putting into the pfsense cert manager to get a > similar effect? And make the browser accept the IP address(es) too? You need to properly define the alternative names of your server certificate. You typically don't do t

[pfSense] Web GUI certs

2014-05-21 Thread Volker Kuhlmann
The web GUI uses a default auto-generated cert, which (as expected) causes browser errors. An improved aproach would be to generate a CA, a key, and to load the CA into the browser. That way I can be assured to not accidentally OK the wrong connection, and it tests my understanding of the cert syst