This changes the parameters for four functions in HAProxy.php.
The ACME Client appears to call these functions with positional rather than named params
so also switch the order of the parameters in these function calls in
While working on the documentation I noticed my previous comment was wrong, which also invalidates the need for an optional setting. When it comes to the "CAfile" setting, the chain shouldn't be provided, for the listener (the server cert) it shouldn't matter at all if you ship the chain since it's not part of the authentication.
This commits simplifies https://github.com/opnsense/plugins/pull/2854 by removing the option. The current documentation online doesn't need any modifications for this.
commit e873aa41591442e16ec0581fa8b6e8696a1821ff
Author: Ad Schellevis <ad@opnsense.org>
Date: Mon Jul 4 14:23:32 2022 +0200
security/stunnel: Add option to chain intermediate CAs (https://github.com/opnsense/plugins/pull/2854), better explain impact and add move to advanced
commit 1e86212ad7
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date: Mon Feb 21 09:52:26 2022 +0800
security/stunnel: Allow GUI usage of restart action
For example, we can now select "Restart Stunnel" from
`Service/ACME-Client/Automations>Run-Command>System-or-Plugin-Command`
in GUI.
commit 005af925b1
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date: Mon Feb 21 09:45:28 2022 +0800
security/stunnel: Add option to chain intermediate CAs
Add an option, defaults disabled, to chain intermediate CAs which is
required when using ACME cert.
This is a plugin we developed to provide configuration and a basic UI for the crowdsec IDS and IPS. It depends on a couple of binaries recently added to ports.conf
Adding machines (servers, other firewalls) and advanced configuration are not managed by the UI but available from the command line.
* Correct TransIP API, fixes#2924
API key field type of Transip corrected from "text" to "textbox". It was not working with "text" due to linebreaks.
Furthernore added a note that 300s sleep time is recommended.