DIY'ing acme in pfsense

January 24, 2025

It turns out the changes to the Porkbun DNS API URL were update in the pfsense acme package, but they don't seem to have made their way into the one that's being downloaded by my firewall.

I've given up trying to look how pfsense package inheritance works, and resorted to just updating the script in the acme package myself.

chmod 775 /usr/local/pkg/acme/dnsapi/dns_porkbun.sh
sed -i 's/https:\/\/porkbun.com\//https:\/\/api.porkbun.com\//g' /usr/local/pkg/acme/dnsapi/dns_porkbun.sh
chmod 555 /usr/local/pkg/acme/dnsapi/dns_porkbun.sh

All works a treat now. It might break if the package gets reinstalled or anything, but it'll do for now.

Considering using pfsense as a place to automate cert issuance and pushing them out from here.