pfSense » pfSense Packages

Steps to reproduce:
Install syslog-ng on a new pfSense instance, version 1.15_4;
-go to Package>Services: Syslog-ng->General;
-toggle "Enabled" checkbox;
-choose LAN interface only, as it's selected by default;
-select default protocol TLS;
-select CA already configured on firewall;
-select certificate already present on firewall (even the webConfigurator default);
-leave other options as default and click Save.

Error message, formatted for easier reading:

*Syslog-ng syntax test failed: Error parsing afsocket,
File "/var/etc/syslog-ng/syslog-ng.key" not found: No such file or directory in /usr/local/etc/syslog-ng.conf:7:16-7:50:
2 # Do not edit manually !
3 @version:3.25
4 destination _DEFAULT { file("/var/syslog-ng/default.log"); };
5 log { source(_DEFAULT); destination(_DEFAULT); };
6 source _DEFAULT { internal(); syslog(transport(tls) port(5140) tls( 7-----> key-file('/var/etc/syslog-ng/syslog-ng.key')
7-----> ^^{^^}^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
8 cert-file('/var/etc/syslog-ng/syslog-ng.cert')
9 ca-dir('/var/etc/syslog-ng/ca.d')) ip({FW IP here})); }; *

Checking via SSH, it looks like there's no /var/etc/syslog-ng/syslog-ng.key created.
Could not find an existing bug report that matches this behaviour.

Quirk: if selecting TCP first, Save button works, daemon is enabled and running. If then selection changes to TLS, save button works as well. After this, there is still no /var/etc/syslog-ng/syslog-ng.key file created.