Using pfsense to sign private wildcard SSL certificates

Wed, 17 Jan 2018 15:17:57 +0000

pfsense is a wonderful router appliance BSD distro that I’ve enjoyed for some years now.

I use the pfsense certificate manager to issue certs for my VPN client devices. For my Internet-facing life, I have legit SSL certs for everything, I’ve a neurosis about it. But it’s bothered me that for my LAN servers, I’ve continued to use Self-Signed certs for interfaces. Today I fix that.

Here are my notes on how to create and sign a wild-card SSL cert using pfsense for internal use. Note that this approach means you will make your own certificate authority which then must have its root cert installed on any machine you want to use your own certs.

AirPlay Through pfsense Bridge

Thu, 23 Dec 2010 19:27:48 +0000

Howdy all, geek-mode enabled.

So I’ve been fighting somewhat to get my AirPlay enabled device (Apple TV) to function perfectly. I use pfsense to run my router and in so doing I’ve got a Wireless and Wired network that are bridged together. I found with the AppleTV that only devices on the same physical media could stream to it, though all devices could “see” it.

After submitting a feature request to Apple over this, I decided I wanted it solved for me anyway and I felt close to the solution. Since I had no logs to go by, I decided to bust out Wireshark to sniff all the involved network traffic. Suffice to say, I was rather entertained to find that when using AirPlay the payloads are flying around in IPv6, not IPv4. Just look at the caption in this post. All those teal packets is iTunes streaming audio to my AppleTV via AirPlay. It’s UDP over IPv6. Neato.

Pfsense on

Using pfsense to sign private wildcard SSL certificates

AirPlay Through pfsense Bridge