Export SSL Certificate from OPNsense to file

download_opnsense_cert.curl.sh

#!/usr/bin/env sh

# Based on https://forum.netgate.com/post/785981

HOSTNAME=""
CERT_ID=""
USERNAME=""
PASSWORD=""

echo "Downloading certificate id=${CERT_ID} from ${HOSTNAME} into cert.pem file..."

# Open login screen
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
    https://$HOSTNAME/system_certmanager.php \
    | grep hidden | sed -E 's/.*name="([^"\]+)" value="([^"]+)".*/\1=\2/' > /tmp/opnsense_csrf.txt

POST_DATA="usernamefld=${USERNAME}&passwordfld=${PASSWORD}&login=1&$(cat /tmp/opnsense_csrf.txt)"

# Perform login
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
    https://$HOSTNAME/system_certmanager.php \
    -X POST --data "${POST_DATA}" > /dev/null

# Export user key
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
    "https://$HOSTNAME/system_certmanager.php?act=key&id=$CERT_ID" > cert.pem

# Export user cert
curl --cookie /tmp/opnsense_cookies.txt --cookie-jar /tmp/opnsense_cookies.txt \
    "https://$HOSTNAME/system_certmanager.php?act=exp&id=$CERT_ID" >> cert.pem

rm -f /tmp/opnsense_csrf.txt /tmp/opnsense_cookies.txt

echo "Done."

download_opnsense_cert.wget.sh

#!/usr/bin/env sh

# Based on https://forum.netgate.com/post/785981

HOSTNAME=""
CERT_ID=""
USERNAME=""
PASSWORD=""

echo "Downloading certificate id=${CERT_ID} from ${HOSTNAME} into cert.pem file..."

# Open login screen
wget -qO- \
	--keep-session-cookies --save-cookies /tmp/opnsense_cookies.txt \
	--no-check-certificate https://$HOSTNAME/system_certmanager.php \
	| grep hidden | sed -E 's/.*name="([^"\]+)" value="([^"]+)".*/\1=\2/' > /tmp/opnsense_csrf.txt

POST_DATA="usernamefld=${USERNAME}&passwordfld=${PASSWORD}&login=1&$(cat /tmp/opnsense_csrf.txt)"

# Perform login
wget -qO- \
	--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
	--save-cookies /tmp/opnsense_cookies.txt \
	--no-check-certificate https://$HOSTNAME/system_certmanager.php \
	--post-data "${POST_DATA}" > /dev/null

# Export user key
wget -qO- \
	--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
	--save-cookies /tmp/opnsense_cookies.txt \
	--no-check-certificate "https://$HOSTNAME/system_certmanager.php?act=key&id=$CERT_ID" > cert.pem

# Export user cert
wget -qO- \
	--keep-session-cookies --load-cookies /tmp/opnsense_cookies.txt \
	--save-cookies /tmp/opnsense_cookies.txt \
	--no-check-certificate "https://$HOSTNAME/system_certmanager.php?act=exp&id=$CERT_ID" >> cert.pem

rm -f /tmp/opnsense_csrf.txt /tmp/opnsense_cookies.txt

echo "Done."