I’ve been reading the TrueNAS 24.10 documentation regarding certificate management in TrueNAS and have questions about it. Currently, I have a wildcard certificate for my domain that I get from lets encrypt and it needs to be refreshed every 90 days or so. I have the certbot running in a VM using …

What the heck, I added builds for macOS arm64, and FreeBSD x86_64. See https://github.com/jrushford/tnascert-deploy and select the Release version 1.1 link

I’ve pushed this change into a new multihost branch of the repo and will merge it shortly. I’ve reverted the change to the API path though; I’ll be including logic to determine which path to use based on the TrueNAS version.

Is that at GitHub? Can you send the link?

I’ve merged your changes into master at GitHub - danb35/deploy-freenas: Python script to automate deploying TLS certificates to TrueNAS servers . I haven’t pushed the logic checking the API path there yet.

@dan Thanks, I see it in Github and have cloned your repository.

[image] dan: I’ve merged your changes into master at GitHub - danb35/deploy-freenas: Python script to automate deploying TLS certificates to TrueNAS servers . I haven’t pushed the logic checking the API path there yet. Have you got a master thread to discuss deploy-freenas? I haven’t found on…

[image] Let's Encrypt with FreeNAS 11.1 and later Resources Integrating Let’s Encrypt TLS Certificates with FreeNAS FreeNAS has long had the ability to use HTTPS for the web GUI, but that has usually meant dealing with self-signed certificates and the associate…

@dan , I have a question. I don’t see the API call “certificate.create” documented in the API docs. What do you know about it? Is that an RPC call or is it an http post endpoint?

I can’t link to that method specifically, but it’s here: https://www.truenas.com/docs/api/scale_websocket_api.html#certificate

@dan , the document you linked to says certificate.create is a job and I see in your script that you give the full path name to the certificate and private key, not the actual content. So this must mean that the files need to be on the actual TrueNAS host for a job to read them right?

[image] jjrushford: I see in your script that you give the full path name to the certificate and private key, not the actual content. Nope. Here’s the relevant code: # Load cert/key def read_file(path, description): try: with open(path, 'r') as file: return file.read…

Managing certificates

TrueNAS General

dan April 7, 2025, 9:18pm 39

Topic		Replies	Views
LetsEncrypt ssl cert distribution tips? TrueNAS General	35	884	March 10, 2025
Let's Encrypt with FreeNAS 11.1 and later Resources CORE , SCALE , TLS	29	1791	October 27, 2025
Tnascert-deploy 2.2 is now available TrueNAS General	12	178	August 13, 2026
Trouble installing TrueNAS API Client on Debian 13 VM TrueNAS General	26	292	December 17, 2025
[Not Accepted] Support local ACME providers without dns challenges Feature Requests	17	896	October 15, 2025

Managing certificates

Related topics