Project

General

Profile

Actions

Bug #13421

open

Stunnel certificate does not refresh

Added by A Schnee about 1 month ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
stunnel
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
All

Description

I use stunnel with ACME certificates which expires every 90 days. When the certificate is 6í days old ACME auto refreshes the certificate. Unfortunately stunnel does not pick up this change. When opening the stunnel config page the certificate are shown but they are not refreshing even on restart of the stunnel service.

The only way i found to refresh is to connect via ssh, go to /usr/local/etc/stunnel and delete the corresponding pem files. After that on the gui open open one of the stunnel configs and save. THis will copy the new cert files from /conf/acme directory to the stunnel directory.

I have to repeat the above steps every time the cert expires. I would expect stunnel to use the certificate from it's original location (/conf/acme), thus it would update the new certificate on service restart.

Stunnel version: 5.50_11
PFSense version: 2.6.0-RELEASE (amd64)

No data to display

Actions

Also available in: Atom PDF