Skip to content

Instantly share code, notes, and snippets.

@danie1k

danie1k/download_opnsense_cert.curl.sh

Last active December 19, 2024 10:40
Show Gist options
  • Save danie1k/c3d866eb6eed93bbc16b0628639efefe to your computer and use it in GitHub Desktop.
Save danie1k/c3d866eb6eed93bbc16b0628639efefe to your computer and use it in GitHub Desktop.
Download ZIP
Export SSL Certificate from OPNsense to file
Raw
download_opnsense_cert.curl.sh
#!/usr/bin/env sh
# Based on https://forum.netgate.com/post/785981
HOSTNAME=""
CERT_ID=""
USERNAME=""
PASSWORD=""
echo "Downloading certificate id=${CERT_ID} from ${HOSTNAME} into cert.pem file..."
# Open login screen
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
https://$HOSTNAME/system_certmanager.php \
| grep hidden | sed -E 's/.*name="([^"\]+)" value="([^"]+)".*/\1=\2/' > /tmp/opnsense_csrf.txt
POST_DATA="usernamefld=${USERNAME}&passwordfld=${PASSWORD}&login=1&$(cat /tmp/opnsense_csrf.txt)"
# Perform login
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
https://$HOSTNAME/system_certmanager.php \
-X POST --data "${POST_DATA}" > /dev/null
# Export user key
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
"https://$HOSTNAME/system_certmanager.php?act=key&id=$CERT_ID" > cert.pem
# Export user cert
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
"https://$HOSTNAME/system_certmanager.php?act=exp&id=$CERT_ID" >> cert.pem
rm -f /tmp/opnsense_csrf.txt /tmp/opnsense_cookies.txt
echo "Done."
Raw
download_opnsense_cert.wget.sh
#!/usr/bin/env sh
# Based on https://forum.netgate.com/post/785981
HOSTNAME=""
CERT_ID=""
USERNAME=""
PASSWORD=""
echo "Downloading certificate id=${CERT_ID} from ${HOSTNAME} into cert.pem file..."
# Open login screen
wget -qO- \
--keep-session-cookies --save-cookies /tmp/opnsense_cookies.txt \
--no-check-certificate https://$HOSTNAME/system_certmanager.php \
| grep hidden | sed -E 's/.*name="([^"\]+)" value="([^"]+)".*/\1=\2/' > /tmp/opnsense_csrf.txt
POST_DATA="usernamefld=${USERNAME}&passwordfld=${PASSWORD}&login=1&$(cat /tmp/opnsense_csrf.txt)"
# Perform login
wget -qO- \
--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
--save-cookies /tmp/opnsense_cookies.txt \
--no-check-certificate https://$HOSTNAME/system_certmanager.php \
--post-data "${POST_DATA}" > /dev/null
# Export user key
wget -qO- \
--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
--save-cookies /tmp/opnsense_cookies.txt \
--no-check-certificate "https://$HOSTNAME/system_certmanager.php?act=key&id=$CERT_ID" > cert.pem
# Export user cert
wget -qO- \
--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
--save-cookies /tmp/opnsense_cookies.txt \
--no-check-certificate "https://$HOSTNAME/system_certmanager.php?act=exp&id=$CERT_ID" >> cert.pem
rm -f /tmp/opnsense_csrf.txt /tmp/opnsense_cookies.txt
echo "Done."
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment