system: generate self-signed server certificate for web GUI

opnsense · Oct 31, 2019 · 296a7e3 · 296a7e3
1 parent 48e0c47
commit 296a7e3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/etc/inc/plugins.inc.d/webgui.inc b/src/etc/inc/plugins.inc.d/webgui.inc
@@ -98,7 +98,8 @@ function webgui_configure_do($verbose = false, $interface = '')
             $cert['descr'] = 'Web GUI SSL certificate';
             mwexec(
                 /* XXX ought to be replaced by PHP calls */
-                '/usr/local/bin/openssl req -new ' .
+                '/usr/local/bin/openssl req -new -extensions server_cert ' .
+                '-config /usr/local/etc/ssl/opnsense.cnf ' .
                 '-newkey rsa:4096 -sha256 -days 365 -nodes -x509 ' .
                 '-subj "/C=NL/ST=Zuid-Holland/L=Middelharnis/O=OPNsense" ' .
                 '-keyout /tmp/ssl.key -out /tmp/ssl.crt'